Merge tag 'v0.78.0' into ci

v0.78.0

SVR-B
-----

- Operations have been consistently renamed to `store` and `restore`.

- `restore` now returns an object containing both the
  BackupForwardSecrecyToken for decryption, and "secret data" to be
  used in the first `store` after restoration.

- `SvrB` now has a `createNewBackupChain` method, allowing you to
  locally persist the backup "secret data" *before* the first store to
  SVR-B for a fresh install.

- With the first two changes, the secret data argument to `restore` is
  now required. See doc comments for more details.

Other Changes
-------------

- Rust: `SessionRecord::has_usable_sender_chain` now takes an
  additional parameter to specify which criteria make a session
  "usable" beyond simply *having* a sender chain. The previous
  behavior can be requested by using
  `SessionUsabilityRequirements::NotStale`.

Author: tulir

Cargo.lock

@@ -37,7 +37,7 @@ default-members = [
 resolver = "2" # so that our dev-dependency features don't leak into products
 
 [workspace.package]
-version = "0.76.7"
+version = "0.78.0"
 authors = ["Signal Messenger LLC"]
 license = "AGPL-3.0-only"
 rust-version = "1.83.0"
@@ -82,7 +82,7 @@ signal-neon-futures = { path = "rust/bridge/node/futures" }
 
 boring-signal = { git = "https://github.com/signalapp/boring", tag = "signal-v4.15.0", package = "boring", default-features = false }
 curve25519-dalek-signal = { git = 'https://github.com/signalapp/curve25519-dalek', package = "curve25519-dalek", tag = 'signal-curve25519-4.1.3' }
-spqr = { git = "https://github.com/signalapp/SparsePostQuantumRatchet.git", tag = "v1.0.0" }
+spqr = { git = "https://github.com/signalapp/SparsePostQuantumRatchet.git", tag = "v1.2.0" }
 tokio-boring-signal = { git = "https://github.com/signalapp/boring", package = "tokio-boring", tag = "signal-v4.15.0" }
 
 aes = "0.8.3"
@@ -144,8 +144,7 @@ itertools = "0.14.0"
 jni = "0.21"
 json5 = "0.4.1"
 libc = "0.2.168"
-libcrux-kem = "0.0.2"
-libcrux-ml-kem = "0.0.2"
+libcrux-ml-kem = { version = "0.0.2", default-features = false }
 linkme = "0.3.33"
 log = "0.4.21"
 log-panics = "2.1.0"

Cargo.toml

@@ -5,7 +5,7 @@
 
 Pod::Spec.new do |s|
   s.name             = 'LibSignalClient'
-  s.version          = '0.76.7'
+  s.version          = '0.78.0'
   s.summary          = 'A Swift wrapper library for communicating with the Signal messaging service.'
 
   s.homepage         = 'https://github.com/signalapp/libsignal'

LibSignalClient.podspec

@@ -1,2 +1,12 @@
-v0.76.7
+v0.78.0
 
+## SVR-B
+
+- Operations have been consistently renamed to `store` and `restore`.
+- `restore` now returns an object containing both the BackupForwardSecrecyToken for decryption, and "secret data" to be used in the first `store` after restoration.
+- `SvrB` now has a `createNewBackupChain` method, allowing you to locally persist the backup "secret data" *before* the first store to SVR-B for a fresh install.
+- With the first two changes, the secret data argument to `restore` is now required. See doc comments for more details.
+
+## Other changes
+
+- Rust: `SessionRecord::has_usable_sender_chain` now takes an additional parameter to specify which criteria make a session "usable" beyond simply *having* a sender chain. The previous behavior can be requested by using `SessionUsabilityRequirements::NotStale`.

RELEASE_NOTES.md

@@ -2,7 +2,7 @@
 
 libsignal makes use of the following open source projects.
 
-## spqr 0.1.0, partial-default-derive 0.1.0, partial-default 0.1.0
+## spqr 1.2.0, partial-default-derive 0.1.0, partial-default 0.1.0
 
 ```
                     GNU AFFERO GENERAL PUBLIC LICENSE

acknowledgments/acknowledgments-android-testing.md

@@ -2,7 +2,7 @@
 
 libsignal makes use of the following open source projects.
 
-## spqr 0.1.0, partial-default-derive 0.1.0, partial-default 0.1.0
+## spqr 1.2.0, partial-default-derive 0.1.0, partial-default 0.1.0
 
 ```
                     GNU AFFERO GENERAL PUBLIC LICENSE

acknowledgments/acknowledgments-android.md

@@ -2,7 +2,7 @@
 
 libsignal makes use of the following open source projects.
 
-## spqr 0.1.0, partial-default-derive 0.1.0, partial-default 0.1.0
+## spqr 1.2.0, partial-default-derive 0.1.0, partial-default 0.1.0
 
 ```
                     GNU AFFERO GENERAL PUBLIC LICENSE

acknowledgments/acknowledgments-desktop.md

@@ -679,7 +679,7 @@ For more information on this, and how to apply and follow the GNU AGPL, see
 			<key>License</key>
 			<string>GNU Affero General Public License v3.0</string>
 			<key>Title</key>
-			<string>spqr 0.1.0, partial-default-derive 0.1.0, partial-default 0.1.0</string>
+			<string>spqr 1.2.0, partial-default-derive 0.1.0, partial-default 0.1.0</string>
 			<key>Type</key>
 			<string>PSGroupSpecifier</string>
 		</dict>

acknowledgments/acknowledgments-ios.plist

@@ -62,7 +62,7 @@ <h2>All license text:</h2>
                 <h3 id="AGPL-3.0">GNU Affero General Public License v3.0</h3>
                 <h4>Used by:</h4>
                 <ul class="license-used-by">
-                    <li><a href="https://crates.io/crates/spqr">spqr 0.1.0</a></li>
+                    <li><a href="https://crates.io/crates/spqr">spqr 1.2.0</a></li>
                     <li><a href="https://github.com/signalapp/partial-default">partial-default-derive 0.1.0</a></li>
                     <li><a href="https://github.com/signalapp/partial-default">partial-default 0.1.0</a></li>
                 </ul>

acknowledgments/acknowledgments.html

@@ -16,7 +16,7 @@ plugins {
 }
 
 allprojects {
-    version = "0.76.7"
+    version = "0.78.0"
     group   = "org.signal"
 
     tasks.withType(KotlinCompile).configureEach {