Ask for provemark/c2pa-verifier 0.11

Generated with the help of an LLM.

Problem/Motivation

provemark/c2pa-verifier 0.11.0 (13 November 2026) verifies the general box hash in a JPEG (c2pa.hash.boxes). Microsoft Bing Image Creator writes every file that way. Up to 0.10, such a file is Invalid on the verifier route whatever it holds.

provemark/content-credentials 0.20.1 allows verifier 0.11, so the module's ^0.20 already admits it. But the install sentence on the settings form, the message when the package is missing, the README and require-dev still ask for ^0.10, so CI tests 0.10.

Proposed resolution

Ask for ^0.11 in those four places. The library requirement stays ^0.20, and nothing else in the code changes.

I tried it on a fresh drupal/recommended-project with provemark/c2pa-verifier:^0.11:

• Composer resolves library 0.20.1 and verifier 0.11.0;
• the release smoke test passes on 1.0.0-alpha6;
• a box-hash JPEG signed under a test root is read as Trusted on the verifier route.

Remaining tasks

Commit, CI, and the project page.

User interface changes

The install sentence for the verifier route says ^0.11.

API changes

None.