# [1.0.0-canary.10](https://github.com/algorandfoundation/liquid-auth-js/compare/v1.0.0-canary.9...v1.0.0-canary.10) (2026-08-13)

### Bug Fixes

* security patches ([4cfb56f](https://github.com/algorandfoundation/liquid-auth-js/commit/4cfb56f1969d6efabb9fe99f41eb0399e093196c))

# [1.0.0-canary.6](https://github.com/algorandfoundation/wallet-provider/compare/v1.0.0-canary.5...v1.0.0-canary.6) (2026-08-13)

### Bug Fixes

* security patches ([c651236](https://github.com/algorandfoundation/wallet-provider/commit/c65123669e74371cce17387ce6ae4308800164b0))

sdk/pyproject.toml declared version = "0.1.0" while the repo carries tags
v0.2.0 and v0.2.1 - and both of those tags ALSO carry "0.1.0". Two independent
claims about which release this is, with nothing binding them.

The first real run of this workflow would therefore have built
trelyan_pq-0.1.0-*.whl, then SLSA-attested and Sigstore-signed those exact
bytes under a v0.2.2 tag. The attestation would have been cryptographically
valid and described the wrong release - which is worse than an unsigned
artifact, because it carries an assurance nobody can act on.

Nothing was published: release.yml was first committed 2026-06-18, AFTER both
tags (it is absent at v0.2.0 and v0.2.1), it has never run, and both GitHub
Releases have zero assets. The mislabelling was latent.

Bumps the declared version to 0.2.2 - verified by building: the wheel is now
trelyan_pq-0.2.2-py3-none-any.whl, previously it would have been 0.1.0 - and
adds a gate in the build job, before anything is compiled or signed, that
fails when the tag does not match. Simulated all three ways: v0.2.2 allowed,
v0.2.1 and v9.9.9 blocked.

Security impact: no crypto or protocol change. Closes a path where a signed,
SLSA-attested artifact could name a different release than its tag.

Bumps the all group with 8 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@algorandfoundation/tealscript](https://github.com/algorandfoundation/TEALScript) | `0.106.3` | `0.107.2` |
| [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin) | `8.64.0` | `8.66.0` |
| [prettier](https://github.com/prettier/prettier) | `3.9.5` | `3.9.6` |
| [rolldown](https://github.com/rolldown/rolldown/tree/HEAD/packages/rolldown) | `1.2.0` | `1.2.3` |
| [rolldown-plugin-dts](https://github.com/sxzz/rolldown-plugin-dts) | `0.23.2` | `0.28.0` |
| [semantic-release](https://github.com/semantic-release/semantic-release) | `25.0.7` | `25.0.9` |
| [tsx](https://github.com/privatenumber/tsx) | `4.23.1` | `4.23.9` |
| [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) | `8.64.0` | `8.66.0` |



Updates `@algorandfoundation/tealscript` from 0.106.3 to 0.107.2
- [Release notes](https://github.com/algorandfoundation/TEALScript/releases)
- [Commits](https://github.com/algorandfoundation/TEALScript/compare/0.106.3...0.107.2)

Updates `@typescript-eslint/eslint-plugin` from 8.64.0 to 8.66.0
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.66.0/packages/eslint-plugin)

Updates `prettier` from 3.9.5 to 3.9.6
- [Release notes](https://github.com/prettier/prettier/releases)
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)
- [Commits](https://github.com/prettier/prettier/compare/3.9.5...3.9.6)

Updates `rolldown` from 1.2.0 to 1.2.3
- [Release notes](https://github.com/rolldown/rolldown/releases)
- [Changelog](https://github.com/rolldown/rolldown/blob/main/CHANGELOG.md)
- [Commits](https://github.com/rolldown/rolldown/commits/v1.2.3/packages/rolldown)

Updates `rolldown-plugin-dts` from 0.23.2 to 0.28.0
- [Release notes](https://github.com/sxzz/rolldown-plugin-dts/releases)
- [Commits](https://github.com/sxzz/rolldown-plugin-dts/compare/v0.23.2...v0.28.0)

Updates `semantic-release` from 25.0.7 to 25.0.9
- [Release notes](https://github.com/semantic-release/semantic-release/releases)
- [Commits](https://github.com/semantic-release/semantic-release/compare/v25.0.7...v25.0.9)

Updates `tsx` from 4.23.1 to 4.23.9
- [Release notes](https://github.com/privatenumber/tsx/releases)
- [Changelog](https://github.com/privatenumber/tsx/blob/master/release.config.cjs)
- [Commits](https://github.com/privatenumber/tsx/compare/v4.23.1...v4.23.9)

Updates `typescript-eslint` from 8.64.0 to 8.66.0
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.66.0/packages/typescript-eslint)

---
updated-dependencies:
- dependency-name: "@algorandfoundation/tealscript"
  dependency-version: 0.107.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: "@typescript-eslint/eslint-plugin"
  dependency-version: 8.66.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: prettier
  dependency-version: 3.9.6
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: rolldown
  dependency-version: 1.2.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: rolldown-plugin-dts
  dependency-version: 0.28.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: semantic-release
  dependency-version: 25.0.9
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: tsx
  dependency-version: 4.23.9
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: typescript-eslint
  dependency-version: 8.66.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all
...

Signed-off-by: dependabot[bot] <support@github.com>