chore(release): prepare for publishing

CHANGELOG.md

@@ -6,6 +6,19 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
 
+## [[0.23.0](https://github.com/Devolutions/sspi-rs/compare/sspi-v0.22.1...sspi-v0.23.0)] - 2026-10-01
+
+### <!-- 1 -->Features
+
+- [**breaking**] Upgrade `winscard` to 0.4, so the public `From<winscard::Error> for sspi::Error` conversion now uses the `winscard` 0.4 error type ([#755](https://github.com/Devolutions/sspi-rs/issues/755)) ([37ebbb8dcd](https://github.com/Devolutions/sspi-rs/commit/37ebbb8dcd07de8bdbacf2662508683213d6590c))
+
+### <!-- 4 -->Bug Fixes
+
+- Encode the Kerberos KDC-REQ nonce as a minimal DER positive 32-bit integer, fixing intermittent `KRB_AP_ERR_MODIFIED` failures from Windows KDCs ([#759](https://github.com/Devolutions/sspi-rs/issues/759)) ([c724a94076](https://github.com/Devolutions/sspi-rs/commit/c724a940763a115f4458195663aba69c49c20b4f))
+- Accept AP-REP sequence numbers of any valid DER length, fixing intermittent mutual authentication failures against Windows acceptors ([#759](https://github.com/Devolutions/sspi-rs/issues/759)) ([c724a94076](https://github.com/Devolutions/sspi-rs/commit/c724a940763a115f4458195663aba69c49c20b4f))
+
+
+
 ## [[0.22.1](https://github.com/Devolutions/sspi-rs/compare/sspi-v0.22.0...sspi-v0.22.1)] - 2026-09-29
 
 ### <!-- 4 -->Bug Fixes

Cargo.toml

@@ -1,6 +1,6 @@
 [package]
 name = "sspi"
-version = "0.22.1"
+version = "0.23.0"
 edition = "2024"
 readme = "README.md"
 license = "MIT OR Apache-2.0"
@@ -78,7 +78,7 @@ unused_result_ok = "warn"
 
 [workspace.dependencies]
 ffi-types = { path = "crates/ffi-types" }
-winscard = { version = "0.3", path = "crates/winscard" }
+winscard = { version = "0.4", path = "crates/winscard" }
 
 dpapi = { version = "0.0.0", path = "crates/dpapi" }
 dpapi-core = { version = "0.1.0", path = "crates/dpapi-core" }

crates/dpapi-web/Cargo.toml

@@ -24,7 +24,7 @@ panic_hook = ["dep:console_error_panic_hook"]
 # DPAPI
 dpapi.workspace = true
 dpapi-transport.workspace = true
-sspi = { path = "../..", version = "0.22" }
+sspi = { path = "../..", version = "0.23" }
 
 # WASM
 wasm-bindgen = "0.2"

crates/dpapi/Cargo.toml

@@ -38,7 +38,7 @@ whoami = "2.1"
 dpapi-core = { workspace = true, features = ["alloc"] }
 dpapi-pdu.workspace = true
 dpapi-transport.workspace = true
-sspi = { path = "../..", version = "0.22" } # public
+sspi = { path = "../..", version = "0.23" } # public
 
 kbkdf = "=0.1.0-rc.1"
 elliptic-curve = { version = "0.14.0", features = ["sec1", "std"] }

crates/winscard/CHANGELOG.md

@@ -6,6 +6,18 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
 
+## [[0.4.0](https://github.com/Devolutions/sspi-rs/compare/winscard-v0.3.4...winscard-v0.4.0)] - 2026-10-01
+
+### <!-- 1 -->Features
+
+- Add the `Cache` trait for plugging in a shared, card-scoped smart card resource manager cache ([#755](https://github.com/Devolutions/sspi-rs/issues/755)) ([37ebbb8dcd](https://github.com/Devolutions/sspi-rs/commit/37ebbb8dcd07de8bdbacf2662508683213d6590c))
+- [**breaking**] `ScardContext::new` now takes a `card_id: Uuid` and a `Box<dyn Cache>`, and seeds the emulated card's cache items only once per card so later minidriver writes are preserved across contexts ([#755](https://github.com/Devolutions/sspi-rs/issues/755)) ([37ebbb8dcd](https://github.com/Devolutions/sspi-rs/commit/37ebbb8dcd07de8bdbacf2662508683213d6590c))
+- [**breaking**] `ScardContext` no longer implements `Clone` ([#755](https://github.com/Devolutions/sspi-rs/issues/755)) ([37ebbb8dcd](https://github.com/Devolutions/sspi-rs/commit/37ebbb8dcd07de8bdbacf2662508683213d6590c))
+- [**breaking**] `SmartCard::new` now takes a `card_id: Uuid`, which is reported as the stable CHUID GUID instead of a random value ([#755](https://github.com/Devolutions/sspi-rs/issues/755)) ([37ebbb8dcd](https://github.com/Devolutions/sspi-rs/commit/37ebbb8dcd07de8bdbacf2662508683213d6590c))
+- `ScardContext` cache reads and writes now honor the freshness counter ([#755](https://github.com/Devolutions/sspi-rs/issues/755)) ([37ebbb8dcd](https://github.com/Devolutions/sspi-rs/commit/37ebbb8dcd07de8bdbacf2662508683213d6590c))
+
+
+
 ## [[0.3.4](https://github.com/Devolutions/sspi-rs/compare/winscard-v0.3.3...winscard-v0.3.4)] - 2026-09-15
 
 ### <!-- 7 -->Build

crates/winscard/Cargo.toml

@@ -1,6 +1,6 @@
 [package]
 name = "winscard"
-version = "0.3.4"
+version = "0.4.0"
 edition = "2024"
 readme = "README.md"
 license = "MIT/Apache-2.0"