chore: release v0.5.0

[vitaminc-release-plz]

🤖 New release

• vitaminc-aead-derive: 0.4.0 -> 0.5.0
• vitaminc-protected-derive: 0.4.0 -> 0.5.0
• vitaminc-protected: 0.4.0 -> 0.5.0
• vitaminc-prf: 0.4.0 -> 0.5.0
• vitaminc-random-derives: 0.4.0 -> 0.5.0
• vitaminc-random: 0.4.0 -> 0.5.0 (⚠ API breaking changes)
• vitaminc-aead: 0.4.0 -> 0.5.0
• vitaminc-aead-value: 0.4.0 -> 0.5.0
• vitaminc-aead-napi: 0.4.0 -> 0.5.0
• vitaminc-encrypt: 0.4.0 -> 0.5.0
• vitaminc-traits: 0.4.0 -> 0.5.0
• vitaminc-async-traits: 0.4.0 -> 0.5.0
• vitaminc-kms: 0.4.0 -> 0.5.0
• vitaminc-password: 0.4.0 -> 0.5.0 (✓ API compatible changes)
• vitaminc-permutation: 0.4.0 -> 0.5.0 (✓ API compatible changes)
• vitaminc-hmac: 0.4.0 -> 0.5.0
• vitaminc: 0.4.0 -> 0.5.0

⚠ vitaminc-random breaking changes

--- failure enum_variant_added: enum variant added on exhaustive enum ---

Description:
A publicly-visible enum without #[non_exhaustive] has a new variant.
        ref: https://doc.rust-lang.org/cargo/reference/semver.html#enum-variant-new
       impl: https://github.com/obi1kenobi/cargo-semver-checks/tree/v0.50.0/src/lints/enum_variant_added.ron

Failed in:
  variant RandomError:SeedRejected in /tmp/.tmpvYC3WD/vitaminc/packages/random/src/lib.rs:37

--- failure trait_associated_type_added: non-sealed public trait added associated type without default value ---

Description:
A non-sealed trait has gained an associated type without a default value, which breaks downstream implementations of the trait
        ref: https://doc.rust-lang.org/cargo/reference/semver.html#trait-new-item-no-default
       impl: https://github.com/obi1kenobi/cargo-semver-checks/tree/v0.50.0/src/lints/trait_associated_type_added.ron

Failed in:
  trait associated type vitaminc_random::BoundedRng::Output in file /tmp/.tmpvYC3WD/vitaminc/packages/random/src/bounded.rs:47

--- failure trait_method_added: pub trait method added ---

Description:
A non-sealed public trait added a new method without a default implementation, which breaks downstream implementations of the trait
        ref: https://doc.rust-lang.org/cargo/reference/semver.html#trait-new-item-no-default
       impl: https://github.com/obi1kenobi/cargo-semver-checks/tree/v0.50.0/src/lints/trait_method_added.ron

Failed in:
  trait method vitaminc_random::BoundedRng::next_below in file /tmp/.tmpvYC3WD/vitaminc/packages/random/src/bounded.rs:60

--- failure trait_method_missing: pub trait method removed or renamed ---

Description:
A trait method is no longer callable, and may have been renamed or removed entirely.
        ref: https://doc.rust-lang.org/cargo/reference/semver.html#trait-item-signature
       impl: https://github.com/obi1kenobi/cargo-semver-checks/tree/v0.50.0/src/lints/trait_method_missing.ron

Failed in:
  method next_bounded of trait BoundedRng, previously in file /tmp/.tmp9q6nSe/vitaminc-random/src/bounded.rs:7

Changelog

vitaminc-random

[0.5.0] - 2026-09-14

Breaking

• Breaking: replace rejection sampling with fixed-count Lemire draw (#281)
• Breaking: oblivious key generation via sort-by-random-key (#282)
• Breaking: make a secret bound total with Protected<NonZeroU32>
• Breaking: draw NonZeroU16 with one bounded call, not an in-stream retry

Documentation

• qualify "uniform" with the reduction's bias bound

Features

• batch key derivation API (plan step 1) (#283)

Fixes

• correct the bias ceiling and the claims around it
• the NonZeroU16 draw's distance is just under 2⁻⁶⁴, not exactly

vitaminc-password

[0.5.0] - 2026-09-14

Breaking

• Breaking: replace rejection sampling with fixed-count Lemire draw (#281)

Documentation

• qualify "uniform" with the reduction's bias bound
• state the bounded draw's bias bound in the README

Fixes

• correct the bias ceiling and the claims around it

vitaminc-permutation

[0.5.0] - 2026-09-14

Breaking

• Breaking: replace rejection sampling with fixed-count Lemire draw (#281)
• Breaking: oblivious key generation via sort-by-random-key (#282)

Features

• batch key derivation API (plan step 1) (#283)

---

This PR was generated with release-plz.

[github-actions]

🧬 Mutation testing (cargo-mutants, --in-diff)

No mutants were generated for the changed lines.

[github-actions]

✅ No CRAP threshold violations

624 function(s) analyzed · threshold 30