What's Changed

• fix: Update sample manifest for c2pa v2 (backport #359) by @caiopensrc in #360
• fix: Resolve yoke-derive yanked crate error (backport #357) by @scouten-adobe in #362
• feat: Bump c2pa to 0.91.2 by @scouten-adobe in #358
• fix: Honor --external-manifest option on export and inspect paths (backport #355) by @caiopensrc in #356
• chore: release v0.28.2 by @caiopensrc in #361

Full Changelog: v0.28.1...v0.28.2

What's Changed

• ci: Backport stable CI parity updates by @scouten-adobe in #342
• chore: Bump c2pa dependency to 0.91.0 on stable by @scouten-adobe in #340
• feat: Backport remaining release infrastructure to stable by @scouten-adobe in #344
• ci: Add promote.yml workflow for release-candidate promotion by @scouten-adobe in #346
• chore: release v0.28.0 by @caiopensrc in #348
• ci: Sequence release publication and PR generation (backport #350) by @scouten-adobe in #353
• fix: Report failed fragments rather than dropping them (backport #336) by @ok-nick in #351
• chore: release v0.28.1 by @caiopensrc in #354

New Contributors

• @caiopensrc made their first contribution in #348

Full Changelog: v0.28.0-rc.1...v0.28.1

What's Changed

• ci: Backport stable CI parity updates by @scouten-adobe in #342
• chore: Bump c2pa dependency to 0.91.0 on stable by @scouten-adobe in #340
• feat: Backport remaining release infrastructure to stable by @scouten-adobe in #344
• ci: Add promote.yml workflow for release-candidate promotion by @scouten-adobe in #346
• chore: release v0.28.0 by @caiopensrc in #348

New Contributors

• @caiopensrc made their first contribution in #348

Full Changelog: v0.27.20...v0.28.0

What's Changed

• feat: Auto-track c2pa-rs's main branch by @scouten-adobe in #309
• ci: Restore full CI job set for the standalone repo by @scouten-adobe in #308
• docs: Fix dangling contentauth/c2pa-rs links by @scouten-adobe in #307
• feat: Restore full release infrastructure for stable + release-process.md by @scouten-adobe in #310
• docs: Add CI, crates.io, and codecov badges to README by @scouten-adobe in #312
• docs: Add support-tiers.md for c2patool by @scouten-adobe in #313
• ci: Add commit-lint enforcement for PR titles by @scouten-adobe in #315
• feat: Open an immediate PR on stable when c2pa-rs publishes a release by @scouten-adobe in #316
• chore: Enable Dependabot version updates, excluding c2pa by @scouten-adobe in #317
• ci: Version-control GitHub labels via labels.yml by @scouten-adobe in #311
• docs: Document --trust_list_uri and init trust subcommand by @scouten-adobe in #303
• chore: bump dtolnay/rust-toolchain from fa04a1451ff1842e2626ccb99004d0195b455a88 to d1031067263f94b142dd6c0ce24c5eb9d02d52a0 by @dependabot[bot] in #319
• fix: Bump MSRV to 1.96.0 and fix release-binary paths by @scouten-adobe in #326
• fix: Use CROSS_ORG_PR_TOKEN for release-rc.yml workflow dispatch by @scouten-adobe in #327

Full Changelog: v0.27.20...v0.28.0-rc.1

• fix: Update c2pa-rs for RegionOfInterest support. (#269)
• Fix broken link that was causing os site workflow to fail (#266)
• Bump codecov/codecov-action from 3 to 4 (#242)
• chore: Run all CI jobs when user is dependabot[bot]
• chore: Debug CI again
• chore: Format for consistency with c2pa-rs CI workflow (#265)
• chore: Don't skip CI jobs for non-pull-request events
• chore: Retry debug
• chore: Debug action context
• chore: Skip CodeCov upload for non-member PRs (#263)
• Bump EmbarkStudios/cargo-deny-action from 1 to 2 (#245)
• chore: Adjust conditions for running CI jobs (#261)

• Merge hardening bug fixes (#260)

• Update c2ptool to use latest c2pa-rs (#258)

• Pull in latest bug fixes (#237)
• Document fragment subcommand (#236)
• Switch back to using pull_request instead of pull_request_target trigger
• Bump actions/checkout from 3 to 4 (#243)
• Remove no-longer-maintained clippy-check action (#238)

• Initial fragment support (#230)
• Add warning about accessing a private key directly (#218)

• Update to latest c2pa SDK (#222)
• Remove rust toolchain version lock (#221)
• Update security guidance to link to SECURITY.md (#217)