chore: release v0.2.0

Author: brendanjryan

.changelog/hash-credential-source-validation.md

@@ -1,5 +1,24 @@
 # Changelog
 
+## 0.11.0 (2026-07-07)
+
+### Minor Changes
+
+- Validate the credential `source` on the Tempo hash-credential verification path. The server now parses the `did:pkh:eip155` source before reserving the transaction hash, requires TIP-20 transfers to originate from the declared source address (falling back to the receipt sender when no source is provided), and rejects malformed or chain-mismatched sources with a uniform error. Adds `ChargeMethod::with_validate_sender` to authorize smart-account / relayer flows where the on-chain transfer sender differs from the declared source. (by @bensandler-stripe, [#308](https://github.com/tempoxyz/mpp-rs/pull/308))
+- Added a structured `reason: Option<PaymentFailureReason>` field to `PaymentFailedContext`, marked the struct `#[non_exhaustive]`, and added `PaymentFailedContext::new()` and `with_reason()` constructors. Downstream callers should construct it via `new()` and destructure it with `..` so future field additions remain non-breaking. (by @bensandler-stripe, [#308](https://github.com/tempoxyz/mpp-rs/pull/308))
+- Sponsored (fee-payer) charges now dry-run the co-signed transaction via `tempo_simulateV1` before broadcasting. If the transaction would revert on-chain, the sponsor rejects it instead of paying gas for a failing transaction. The check fails closed: if the simulation RPC is unavailable, the charge is rejected. (by @bensandler-stripe, [#308](https://github.com/tempoxyz/mpp-rs/pull/308))
+- Added TIP-1034 Tempo session client primitives for descriptor-backed channels, precompile ABI helpers, voucher signing, and fee-sponsored session opens. (by @bensandler-stripe, [#308](https://github.com/tempoxyz/mpp-rs/pull/308))
+
+### Patch Changes
+
+- Rejected oversized `WWW-Authenticate` `request` parameters before decoding payment challenges. (by @bensandler-stripe, [#308](https://github.com/tempoxyz/mpp-rs/pull/308))
+- Add client-side Tempo chain pinning. `TempoProvider::with_expected_chain_id` rejects charge challenges whose `methodDetails.chainId` conflicts with the configured chain ID, and signs on the pinned chain when the challenge omits it — matching the mpp-go conformance ABI. (by @bensandler-stripe, [#308](https://github.com/tempoxyz/mpp-rs/pull/308))
+- Align Tempo zero-amount proof shape with the wallet proof flow. (by @bensandler-stripe, [#308](https://github.com/tempoxyz/mpp-rs/pull/308))
+
+## 0.2.0 (2026-07-07)
+
+## 0.3.0 (2026-07-07)
+
 ## 0.1.4 (2026-06-02)
 
 ## 0.10.4 (2026-06-02)

.changelog/payment-failed-context-non-exhaustive.md

@@ -1,6 +1,6 @@
 [package]
 name = "mpp"
-version = "0.10.4"
+version = "0.11.0"
 edition = "2021"
 description = "Rust SDK for the Machine Payments Protocol (MPP)"
 license = "MIT OR Apache-2.0"

.changelog/payment-request-size-cap.md

@@ -1,7 +1,7 @@
 [package]
 name = "alloy-transport-mpp"
 description = "Machine Payments Protocol (MPP) transport layer over WebSocket for alloy"
-version = "0.1.4"
+version = "0.2.0"
 edition = "2021"
 rust-version = "1.91"
 license = "MIT OR Apache-2.0"