chore: release v0.7.0

[cipherstash-release-plz]

🤖 New release

• vitaminc-aead-derive: 0.6.1 -> 0.7.0
• vitaminc-protected-derive: 0.6.1 -> 0.7.0
• vitaminc-protected: 0.6.1 -> 0.7.0
• vitaminc-context: 0.6.1 -> 0.7.0
• vitaminc-random-derives: 0.6.1 -> 0.7.0
• vitaminc-random: 0.6.1 -> 0.7.0
• vitaminc-aead: 0.6.1 -> 0.7.0
• vitaminc-normalize: 0.6.1 -> 0.7.0 (✓ API compatible changes)
• vitaminc-prf: 0.6.1 -> 0.7.0
• vitaminc-aead-napi: 0.6.1 -> 0.7.0
• vitaminc-aead-frame: 0.6.1 -> 0.7.0
• vitaminc-encrypt: 0.6.1 -> 0.7.0
• vitaminc-traits: 0.6.1 -> 0.7.0
• vitaminc-async-traits: 0.6.1 -> 0.7.0
• vitaminc-hmac: 0.6.1 -> 0.7.0
• vitaminc-kms: 0.6.1 -> 0.7.0
• vitaminc-ore: 0.6.1 -> 0.7.0 (⚠ API breaking changes)
• vitaminc-permutation: 0.6.1 -> 0.7.0
• vitaminc: 0.6.1 -> 0.7.0
• vitaminc-password: 0.6.1 -> 0.7.0

⚠ vitaminc-ore breaking changes

--- failure enum_no_repr_variant_discriminant_changed: enum variant had its discriminant change value ---

Description:
The enum's variant had its discriminant value change. This breaks downstream code that used its value via a numeric cast like `as isize`.
        ref: https://doc.rust-lang.org/reference/items/enumerations.html#assigning-discriminant-values
       impl: https://github.com/obi1kenobi/cargo-semver-checks/tree/v0.51.0/src/lints/enum_no_repr_variant_discriminant_changed.ron

Failed in:
  variant OrderTarget::I16 2 -> 0 in /tmp/.tmp7CrNBH/vitaminc/packages/ore/src/order.rs:126
  variant OrderTarget::U16 3 -> 1 in /tmp/.tmp7CrNBH/vitaminc/packages/ore/src/order.rs:128
  variant OrderTarget::I32 4 -> 2 in /tmp/.tmp7CrNBH/vitaminc/packages/ore/src/order.rs:130
  variant OrderTarget::U32 5 -> 3 in /tmp/.tmp7CrNBH/vitaminc/packages/ore/src/order.rs:132
  variant OrderTarget::I64 6 -> 4 in /tmp/.tmp7CrNBH/vitaminc/packages/ore/src/order.rs:134
  variant OrderTarget::U64 7 -> 5 in /tmp/.tmp7CrNBH/vitaminc/packages/ore/src/order.rs:136
  variant OrderTarget::I128 8 -> 6 in /tmp/.tmp7CrNBH/vitaminc/packages/ore/src/order.rs:138
  variant OrderTarget::U128 9 -> 7 in /tmp/.tmp7CrNBH/vitaminc/packages/ore/src/order.rs:140
  variant OrderTarget::F64 10 -> 8 in /tmp/.tmp7CrNBH/vitaminc/packages/ore/src/order.rs:142
  variant OrderTarget::Date 11 -> 9 in /tmp/.tmp7CrNBH/vitaminc/packages/ore/src/order.rs:144
  variant OrderTarget::Timestamp 12 -> 10 in /tmp/.tmp7CrNBH/vitaminc/packages/ore/src/order.rs:146
  variant OrderTarget::Decimal 13 -> 11 in /tmp/.tmp7CrNBH/vitaminc/packages/ore/src/order.rs:148
  variant OrderTarget::Text 14 -> 12 in /tmp/.tmp7CrNBH/vitaminc/packages/ore/src/order.rs:150
  variant OrderTarget::Bytes 15 -> 13 in /tmp/.tmp7CrNBH/vitaminc/packages/ore/src/order.rs:152
  variant OrderTarget::Uuid 16 -> 14 in /tmp/.tmp7CrNBH/vitaminc/packages/ore/src/order.rs:154

--- failure enum_variant_missing: pub enum variant removed or renamed ---

Description:
A publicly-visible enum has at least one variant that is no longer available under its prior name. It may have been renamed or removed entirely.
        ref: https://doc.rust-lang.org/cargo/reference/semver.html#item-remove
       impl: https://github.com/obi1kenobi/cargo-semver-checks/tree/v0.51.0/src/lints/enum_variant_missing.ron

Failed in:
  variant OrderTarget::I8, previously in file /tmp/.tmpLiTiK3/vitaminc-ore/src/order.rs:86
  variant OrderTarget::U8, previously in file /tmp/.tmpLiTiK3/vitaminc-ore/src/order.rs:88

--- failure inherent_method_missing: pub method removed or renamed ---

Description:
A publicly-visible method or associated fn is no longer available under its prior name. It may have been renamed or removed entirely.
        ref: https://doc.rust-lang.org/cargo/reference/semver.html#item-remove
       impl: https://github.com/obi1kenobi/cargo-semver-checks/tree/v0.51.0/src/lints/inherent_method_missing.ron

Failed in:
  OrderError::unsupported, previously in file /tmp/.tmpLiTiK3/vitaminc-ore/src/scheme.rs:110

--- failure pub_module_level_const_missing: pub module-level const is missing ---

Description:
A public const is missing or renamed
        ref: https://doc.rust-lang.org/cargo/reference/semver.html#item-remove
       impl: https://github.com/obi1kenobi/cargo-semver-checks/tree/v0.51.0/src/lints/pub_module_level_const_missing.ron

Failed in:
  INT8 in file /tmp/.tmpLiTiK3/vitaminc-ore/src/order.rs:30
  UINT8 in file /tmp/.tmpLiTiK3/vitaminc-ore/src/order.rs:32

--- failure struct_missing: pub struct removed or renamed ---

Description:
A publicly-visible struct cannot be imported by its prior path. A `pub use` may have been removed, or the struct itself may have been renamed or removed entirely.
        ref: https://doc.rust-lang.org/cargo/reference/semver.html#item-remove
       impl: https://github.com/obi1kenobi/cargo-semver-checks/tree/v0.51.0/src/lints/struct_missing.ron

Failed in:
  struct vitaminc_ore::OrderColumn, previously in file /tmp/.tmpLiTiK3/vitaminc-ore/src/scheme.rs:257

--- failure trait_associated_type_added: non-sealed public trait added associated type without default value ---

Description:
A non-sealed trait has gained an associated type without a default value, which breaks downstream implementations of the trait
        ref: https://doc.rust-lang.org/cargo/reference/semver.html#trait-new-item-no-default
       impl: https://github.com/obi1kenobi/cargo-semver-checks/tree/v0.51.0/src/lints/trait_associated_type_added.ron

Failed in:
  trait associated type vitaminc_ore::OrderScheme::Space in file /tmp/.tmp7CrNBH/vitaminc/packages/ore/src/scheme.rs:180

--- failure trait_method_added: pub trait method added ---

Description:
A non-sealed public trait added a new method without a default implementation, which breaks downstream implementations of the trait
        ref: https://doc.rust-lang.org/cargo/reference/semver.html#trait-new-item-no-default
       impl: https://github.com/obi1kenobi/cargo-semver-checks/tree/v0.51.0/src/lints/trait_method_added.ron

Failed in:
  trait method vitaminc_ore::OrderScheme::open in file /tmp/.tmp7CrNBH/vitaminc/packages/ore/src/scheme.rs:205

Changelog

vitaminc-normalize

[0.7.0] - 2026-10-20

Documentation

• say exactly when the normalization buffers move to the heap and what they leave behind

Fixes

• have each encoder own the wiped buffer it writes, so no caller can pass one that is not

vitaminc-ore

[0.7.0] - 2026-10-20

Breaking

• Breaking: typed targets and a chained API, with OrderColumn renamed to OrderSpace
• Breaking: start the text and bytes order encodings with a marker byte, so no order plaintext is empty
• Breaking: let a scheme derive its keys once per space, not once per term
• Breaking: open takes the space's target as well as its salt
• Breaking: require an order space to wipe itself on drop
• Breaking: remove the one-byte order targets, I8 and U8

Documentation

• say what a query's type prevents and why not to keep one
• say a query is guarded against being kept, not wiped from memory
• say exactly when the normalization buffers move to the heap and what they leave behind

Features

• OrderQuery, the query side of an order scheme

Fixes

• mask a query's bytes in Debug, and test the query checks that had none
• write an integer's order encoding straight into the wiped buffer that is returned, so no plain copy is made

---

This PR was generated with release-plz.

[github-actions]

🧬 Mutation testing (cargo-mutants, --in-diff)

No mutants were generated for the changed lines.

[github-actions]

✅ No CRAP threshold violations

1288 function(s) analyzed · threshold 30