chore: release v0.2.0-pre.2

[vitaminc-release-plz]

🤖 New release

• vitaminc-protected-derive: 0.2.0-pre.1 -> 0.2.0-pre.2
• vitaminc-protected: 0.2.0-pre.1 -> 0.2.0-pre.2 (✓ API compatible changes)
• vitaminc-random-derives: 0.2.0-pre.1 -> 0.2.0-pre.2
• vitaminc-random: 0.2.0-pre.1 -> 0.2.0-pre.2 (✓ API compatible changes)
• vitaminc-aead: 0.2.0-pre.1 -> 0.2.0-pre.2 (✓ API compatible changes)
• vitaminc-traits: 0.2.0-pre.1 -> 0.2.0-pre.2
• vitaminc-async-traits: 0.2.0-pre.1 -> 0.2.0-pre.2 (✓ API compatible changes)
• vitaminc-encrypt: 0.2.0-pre.1 -> 0.2.0-pre.2 (✓ API compatible changes)
• vitaminc-kms: 0.2.0-pre.1 -> 0.2.0-pre.2 (✓ API compatible changes)
• vitaminc-password: 0.2.0-pre.1 -> 0.2.0-pre.2 (✓ API compatible changes)
• vitaminc-permutation: 0.2.0-pre.1 -> 0.2.0-pre.2 (✓ API compatible changes)
• vitaminc: 0.2.0-pre.1 -> 0.2.0-pre.2 (✓ API compatible changes)

Changelog

vitaminc-protected

Documentation

• fix fabricated APIs, wrong metadata, and stale claims; add SECURITY.md

Fixes

• zeroize controlled types on drop (#181)

Refactoring

• move instead of copy in flatten_array
• single-source into_inner_unchecked; document drop-glue guarantees
• make move_inner_out a safe fn via an unsafe trait

vitaminc-random

Fixes

• thread T: Zeroize bound and drop Copy for Protected<T> does not actually zeroize on drop (Drop impl missing) #181

vitaminc-aead

Documentation

• docs(aead),refactor(encrypt): address decrypt-path review findings
• docs(aead),test(encrypt): document ContextTag limits; add negative-AAD tests

Features

• re-introduce ContextTag on the revised Cipher/Decipher traits
• add ContextTag::context + decrypt/decrypt_with_aad helper
• implement Encrypt/Decrypt for the Equatable controlled type

Refactoring

• thread AAD through the decrypt path to mirror encrypt
• align ContextTag::aad_with arg order with encrypt_with_aad
• address ContextTag decrypt-helper review

Testing

• close Tier-1 cargo-mutants gaps (ConstantTimeEq, PAE invariant)
• close remaining Tier-1 cargo-mutants gaps (ts_ne, zeroize, read_nonce, hlist CI)
• address code-review findings on the Tier-1 mutation fixes
• test(aead),test(encrypt): close ContextTag coverage gaps from review

vitaminc-async-traits

Documentation

• fix fabricated APIs, wrong metadata, and stale claims; add SECURITY.md

vitaminc-encrypt

Documentation

• correct stale Protected<T> does not actually zeroize on drop (Drop impl missing) #181 zeroize note on Aes256Cipher::open
• docs(aead),refactor(encrypt): address decrypt-path review findings
• docs(aead),test(encrypt): document ContextTag limits; add negative-AAD tests
• fix fabricated APIs, wrong metadata, and stale claims; add SECURITY.md

Features

• expose Aes256Cipher::decipher to construct a Decipher
• re-introduce ContextTag on the revised Cipher/Decipher traits
• add ContextTag::context + decrypt/decrypt_with_aad helper

Miscellaneous

• rustfmt context_tag test to satisfy CI

Performance

• borrow AAD per seq/map element instead of cloning

Refactoring

• thread AAD through the decrypt path to mirror encrypt
• tidy decrypt AAD path per code review
• align ContextTag::aad_with arg order with encrypt_with_aad
• address ContextTag decrypt-helper review

Testing

• split test-module cfg so cargo-mutants skips it
• add positive AAD roundtrip for the sequence path
• test(aead),test(encrypt): close ContextTag coverage gaps from review
• cover Equatable AEAD round-trip and tamper axes

vitaminc-kms

Documentation

• fix fabricated APIs, wrong metadata, and stale claims; add SECURITY.md

Miscellaneous

• bump aws-sdk-kms from 1.107.0 to 1.109.0
• bump aws-config from 1.8.17 to 1.8.18

vitaminc-password

Documentation

• fix fabricated APIs, wrong metadata, and stale claims; add SECURITY.md

vitaminc-permutation

Fixes

• thread T: Zeroize bound and drop Copy for Protected<T> does not actually zeroize on drop (Drop impl missing) #181

Refactoring

• borrow in invert() instead of cloning the key
• single-source into_inner_unchecked; document drop-glue guarantees

vitaminc

Documentation

• fix fabricated APIs, wrong metadata, and stale claims; add SECURITY.md

---

This PR was generated with release-plz.

[github-actions]

✅ No CRAP threshold violations

281 function(s) analyzed · threshold 30

[github-actions]

🧬 Mutation testing (cargo-mutants, --in-diff)

No mutants were generated for the changed lines.