c2pa_sign 1.5.0

A maintenance release that makes signing reliable with current c2patool versions, fixes Drupal 10 compatibility, and raises the c2patool library requirement. 23 issues since 1.4.11.

Update instructions

This release requires jrglasgow/c2patool 0.6.0, so update with its dependencies:

composer require 'drupal/c2pa_sign:^1.5' -W
drush cr

The -W flag lets Composer upgrade the c2patool library at the same time. There are no database updates. A plain composer update drupal/c2pa_sign is not enough, because it would leave the library behind.

Highlights

• Manifests that c2patool 0.10 and later accept, with the creativeWork fields in parameters, an ISO when, and the effect description on image style actions. Subclasses of core image effects are mapped to their action instead of c2pa.unknown.
• Drupal 10 works again, after a subscriber type hint broke every page on it.
• The status report no longer fails near certificate expiry and reports the c2patool and library versions. Requirements moved to the OOP hooks for Drupal 11.3.
• The module passes cspell, phpcs and phpstan on Drupal 10 and 11.

Changes since 1.4.11

• #3596030: Always write a claim generator entry and tolerate a missing site name or logo
• #3596031: Apply the site file permissions after signing a file in place
• #3596032: Build manifests that c2patool 0.10 and later accept
• #3596033: Update the README and composer.json for recent c2patool
• #3596035: Add GitLab CI and a signing kernel test
• #3596036: Move the creativeWork title, creator and description into parameters
• #3596037: Require recent c2patool versions and log signing failures
• #3596038: Describe every settings key in the config schema
• #3596039: Read the title option when building a manifest
• #3596040: Resolve a relative certificate directory before signing
• #3596041: Write an ISO when and the effect description on image style actions
• #3596042: Map subclasses of core image effects to their C2PA action
• #3596043: Add a kernel test that signs an image style derivative
• #3596044: Type the subscriber services by interface for Drupal 10 and 11
• #3596045: Import Url for the certificate expiry warning
• #3596046: Translate the status and settings form messages with placeholders
• #3596047: Initialize the target file in the derivative subscriber
• #3596048: Add the cspell project words and fix four typos
• #3596049: Remove the Drupal static calls in the settings form and add phpstan.neon
• #3596050: Fix the Drupal coding standard issues
• #3596051: Move the requirements to the OOP requirements hooks
• #3596052: Require jrglasgow/c2patool 0.6.0
• #3596053: Require c2patool 0.6.0 in the status report

Credits

Worked on by sjpagan, with the co-maintainer jrglasgow for the c2patool 0.6.0 release and a fix and reports from maurice1969.