Release 1.0.0 (#341)

* Release 1.0.0: bump asherah crates + Python/Java bindings to 1.0.0

Bumps to 1.0.0:
- the crates.io publish set: asherah, asherah-config, asherah-cobhan, asherah-ffi
- the Python and Java binding crates: asherah-py, asherah-java

Left on their own independent version tracks (published from this monorepo by the
existing workflows):
- npm (asherah-node): 4.0.0-beta.N - its crate version stays 0.1.0; only its
  path-dep requirements on asherah/asherah-config move to 1.0.0 so the workspace
  compiles against the 1.0.0 core
- PyPI: PYPI_VERSION repo variable (set-pypi-version.sh)
- Maven (appencryption): 0.50.x (publish-maven.yml)
- asherah-server / asherah-bench (internal): 0.1.0

Inter-crate version requirements updated to 1.0.0; Cargo.lock reconciled; full
workspace resolves.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

* npm: keep 4.x stable on @latest (and @next mirroring it); tidy asherah-node

The npm package already ships stable: NPM_VERSION is set, so the workflow
publishes 4.0.<patch> to @latest and syncs @next to the same version (so anyone
tracking @next stays current, not stranded on an old release). That behavior is
kept as-is.

Cosmetic/tidy only:
- asherah-node/package.json: 4.0.0-beta.1 -> 4.0.0 (committed value is a
  placeholder the workflow overwrites from NPM_VERSION at publish; it should not
  read as a beta).
- asherah-node/Cargo.toml: crate version 0.1.0 -> 4.0.0 to match the npm major
  (publish = false already set, so it is never a crates.io artifact).

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

---------

Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

Author: jgowdy

Cargo.lock

@@ -1,6 +1,6 @@
 [package]
 name = "asherah-cobhan"
-version = "0.5.2"
+version = "1.0.0"
 edition = "2021"
 license = "Apache-2.0"
 description = "Cobhan-compatible C ABI for Asherah, drop-in replacement for the Go asherah-cobhan library."
@@ -17,8 +17,8 @@ default = []
 test-helpers = []
 
 [dependencies]
-asherah = { version = "0.1.2", path = "../asherah", features = ["sqlite", "mysql", "postgres", "dynamodb"] }
-asherah-config = { version = "0.1.2", path = "../asherah-config" }
+asherah = { version = "1.0.0", path = "../asherah", features = ["sqlite", "mysql", "postgres", "dynamodb"] }
+asherah-config = { version = "1.0.0", path = "../asherah-config" }
 log = "0.4"
 serde_json = "1.0"
 serde = { version = "1.0", features = ["derive"] }

asherah-cobhan/Cargo.toml

@@ -1,6 +1,6 @@
 [package]
 name = "asherah-config"
-version = "0.1.2"
+version = "1.0.0"
 edition = "2021"
 license = "Apache-2.0"
 description = "Shared configuration types and environment variable transport for Asherah language bindings."
@@ -14,7 +14,7 @@ categories = ["config", "cryptography", "memory-management"]
 anyhow = "1.0"
 serde = { version = "1.0", features = ["derive"] }
 serde_json = "1.0"
-asherah = { version = "0.1.2", path = "../asherah" }
+asherah = { version = "1.0.0", path = "../asherah" }
 
 [[test]]
 name = "config_apply_env"

asherah-config/Cargo.toml

@@ -1,6 +1,6 @@
 [package]
 name = "asherah-ffi"
-version = "0.1.1"
+version = "1.0.0"
 edition = "2021"
 license = "Apache-2.0"
 description = "C ABI (Cobhan buffer format) for the Asherah encryption library, used by .NET, Ruby, and Go bindings."
@@ -14,9 +14,9 @@ categories = ["cryptography", "memory-management", "api-bindings"]
 crate-type = ["cdylib", "rlib"]
 
 [dependencies]
-asherah = { version = "0.1.2", path = "../asherah", features = ["sqlite", "mysql", "postgres", "dynamodb"] }
-asherah-cobhan = { version = "0.5.2", path = "../asherah-cobhan" }
-asherah-config = { version = "0.1.2", path = "../asherah-config" }
+asherah = { version = "1.0.0", path = "../asherah", features = ["sqlite", "mysql", "postgres", "dynamodb"] }
+asherah-cobhan = { version = "1.0.0", path = "../asherah-cobhan" }
+asherah-config = { version = "1.0.0", path = "../asherah-config" }
 serde_json = "1.0"
 anyhow = "1.0"
 tokio = { version = "1", features = ["rt-multi-thread"] }

asherah-ffi/Cargo.toml

@@ -1,6 +1,6 @@
 [package]
 name = "asherah-java"
-version = "0.1.0"
+version = "1.0.0"
 edition = "2021"
 license = "Apache-2.0"
 description = "JNI bindings for the Asherah Rust library"
@@ -17,8 +17,8 @@ crate-type = ["cdylib", "rlib"]
 
 [dependencies]
 jni = { version = "0.22", default-features = false, features = ["invocation"] }
-asherah = { version = "0.1.1", path = "../asherah", features = ["sqlite", "mysql", "postgres", "dynamodb"] }
-asherah-config = { version = "0.1.1", path = "../asherah-config" }
+asherah = { version = "1.0.0", path = "../asherah", features = ["sqlite", "mysql", "postgres", "dynamodb"] }
+asherah-config = { version = "1.0.0", path = "../asherah-config" }
 anyhow = "1.0"
 serde_json = "1.0"
 tokio = { version = "1", features = ["rt-multi-thread"] }

asherah-java/Cargo.toml

@@ -1,6 +1,6 @@
 [package]
 name = "asherah-node"
-version = "0.1.0"
+version = "4.0.0"
 edition = "2021"
 license = "Apache-2.0"
 description = "Node.js addon for Asherah (napi-rs)"
@@ -20,8 +20,8 @@ napi-derive = "3"
 serde = { version = "1.0", features = ["derive"] }
 serde_json = "1.0"
 anyhow = "1.0"
-asherah = { version = "0.1.1", path = "../asherah", features = ["sqlite", "mysql", "postgres", "dynamodb"] }
-asherah-config = { version = "0.1.1", path = "../asherah-config" }
+asherah = { version = "1.0.0", path = "../asherah", features = ["sqlite", "mysql", "postgres", "dynamodb"] }
+asherah-config = { version = "1.0.0", path = "../asherah-config" }
 tokio = { version = "1", features = ["rt-multi-thread"] }
 once_cell = "1"
 parking_lot = "0.12"

asherah-node/Cargo.toml

@@ -1,6 +1,6 @@
 {
   "name": "asherah",
-  "version": "4.0.0-beta.1",
+  "version": "4.0.0",
   "private": false,
   "description": "Asherah application-layer encryption for Node.js with automatic key rotation, powered by the native Rust implementation.",
   "author": "Jay Gowdy",

asherah-node/package.json

@@ -1,6 +1,6 @@
 [package]
 name = "asherah-py"
-version = "0.1.0"
+version = "1.0.0"
 edition = "2021"
 license = "Apache-2.0"
 description = "Python bindings for the Asherah Rust library"
@@ -21,9 +21,9 @@ workspace = true
 
 [dependencies]
 pyo3 = { version = "0.28", features = ["extension-module", "abi3-py38", "generate-import-lib", "serde", "experimental-async"] }
-asherah = { version = "0.1.1", path = "../asherah", features = ["sqlite", "mysql", "postgres", "dynamodb"] }
+asherah = { version = "1.0.0", path = "../asherah", features = ["sqlite", "mysql", "postgres", "dynamodb"] }
 tokio = { version = "1", features = ["rt-multi-thread", "sync"] }
-asherah-config = { version = "0.1.1", path = "../asherah-config" }
+asherah-config = { version = "1.0.0", path = "../asherah-config" }
 serde_json = "1.0"
 anyhow = "1.0"
 once_cell = "1.21"

asherah-py/Cargo.toml

@@ -1,6 +1,6 @@
 [package]
 name = "asherah"
-version = "0.1.3"
+version = "1.0.0"
 edition = "2021"
 license = "Apache-2.0"
 description = "Application-layer envelope encryption with automatic key rotation, secure memory, and pluggable metastore/KMS backends."