chore(release): prepare for publishing

[devolutionsbot]

🤖 New release

• ironrdp-error: 0.2.0 -> 0.2.1 (✓ API compatible changes)
• ironrdp-core: 0.2.1 -> 0.3.0 (⚠ API breaking changes)
• ironrdp-pdu: 0.9.0 -> 0.10.0 (⚠ API breaking changes)
• ironrdp-svc: 0.8.0 -> 0.8.1 (✓ API compatible changes)
• ironrdp-connector: 0.10.0 -> 0.11.0 (⚠ API breaking changes)
• ironrdp-async: 0.10.0 -> 0.11.0 (✓ API compatible changes)
• ironrdp-acceptor: 0.10.0 -> 0.11.0 (⚠ API breaking changes)
• ironrdp-dvc: 0.8.0 -> 0.8.1 (✓ API compatible changes)
• ironrdp-displaycontrol: 0.8.0 -> 0.8.1 (✓ API compatible changes)
• ironrdp-dvc-pipe-proxy: 0.5.0 -> 0.5.1 (✓ API compatible changes)
• ironrdp-graphics: 0.9.0 -> 0.10.0 (⚠ API breaking changes)
• ironrdp-tls: 0.2.2 -> 0.2.3 (✓ API compatible changes)
• ironrdp-rdcleanpath: 0.2.2 -> 0.2.3 (✓ API compatible changes)
• ironrdp-rdpsnd: 0.9.0 -> 0.9.1 (✓ API compatible changes)
• ironrdp-rdpsnd-native: 0.7.0 -> 0.7.1 (✓ API compatible changes)
• ironrdp-bulk: 0.1.1 -> 0.2.0 (✓ API compatible changes)
• ironrdp-session: 0.11.0 -> 0.12.0 (⚠ API breaking changes)
• ironrdp-client: 0.1.0 -> 0.2.0 (✓ API compatible changes)
• ironrdp-egfx: 0.3.0 -> 0.3.1 (✓ API compatible changes)
• ironrdp-server: 0.13.0 -> 0.14.0 (⚠ API breaking changes)
• ironrdp: 0.17.0 -> 0.18.0 (✓ API compatible changes)
• ironrdp-blocking: 0.10.0 -> 0.11.0 (✓ API compatible changes)
• ironrdp-agent: 0.1.0 -> 0.2.0 (⚠ API breaking changes)
• ironrdp-viewer: 0.1.0 -> 0.1.1 (✓ API compatible changes)
• ironrdp-cliprdr: 0.7.0 -> 0.7.1
• ironrdp-cliprdr-native: 0.7.0 -> 0.7.1
• ironrdp-echo: 0.4.0 -> 0.4.1
• ironrdp-mstsgu: 0.0.1 -> 0.0.2
• ironrdp-rdpdr: 0.7.0 -> 0.7.1
• ironrdp-tokio: 0.10.0 -> 0.10.1
• ironrdp-dvc-com-plugin: 0.1.3 -> 0.1.4
• ironrdp-input: 0.7.0 -> 0.7.1
• ironrdp-ainput: 0.8.0 -> 0.8.1
• ironrdp-nscodec: 0.2.0 -> 0.2.1
• ironrdp-cliprdr-format: 0.2.0 -> 0.2.1
• ironrdp-futures: 0.8.0 -> 0.8.1
• ironrdp-rdpdr-native: 0.7.0 -> 0.7.1
• ironrdp-str: 0.1.1 -> 0.1.2

⚠ ironrdp-core breaking changes

--- failure inherent_method_missing: pub method removed or renamed ---

Description:
A publicly-visible method or associated fn is no longer available under its prior name. It may have been renamed or removed entirely.
        ref: https://doc.rust-lang.org/cargo/reference/semver.html#item-remove
       impl: https://github.com/obi1kenobi/cargo-semver-checks/tree/v0.47.0/src/lints/inherent_method_missing.ron

Failed in:
  ReadCursor::rewinded, previously in file /tmp/.tmplXjPko/ironrdp-core/src/cursor.rs:496
  WriteCursor::rewinded, previously in file /tmp/.tmplXjPko/ironrdp-core/src/cursor.rs:732

⚠ ironrdp-pdu breaking changes

--- failure constructible_struct_adds_field: externally-constructible struct adds field ---

Description:
A pub struct constructible with a struct literal has a new pub field. Existing struct literals must be updated to include the new field.
        ref: https://doc.rust-lang.org/reference/expressions/struct-expr.html
       impl: https://github.com/obi1kenobi/cargo-semver-checks/tree/v0.47.0/src/lints/constructible_struct_adds_field.ron

Failed in:
  field ShareDataCtx.compression_flags in /tmp/.tmpgonPx3/IronRDP/crates/ironrdp-pdu/src/rdp/headers.rs:152
  field ShareDataCtx.compression_type in /tmp/.tmpgonPx3/IronRDP/crates/ironrdp-pdu/src/rdp/headers.rs:153

--- failure enum_variant_added: enum variant added on exhaustive enum ---

Description:
A publicly-visible enum without #[non_exhaustive] has a new variant.
        ref: https://doc.rust-lang.org/cargo/reference/semver.html#enum-variant-new
       impl: https://github.com/obi1kenobi/cargo-semver-checks/tree/v0.47.0/src/lints/enum_variant_added.ron

Failed in:
  variant ShareDataPdu:Compressed in /tmp/.tmpgonPx3/IronRDP/crates/ironrdp-pdu/src/rdp/headers.rs:536

⚠ ironrdp-connector breaking changes

--- failure constructible_struct_adds_field: externally-constructible struct adds field ---

Description:
A pub struct constructible with a struct literal has a new pub field. Existing struct literals must be updated to include the new field.
        ref: https://doc.rust-lang.org/reference/expressions/struct-expr.html
       impl: https://github.com/obi1kenobi/cargo-semver-checks/tree/v0.47.0/src/lints/constructible_struct_adds_field.ron

Failed in:
  field ClientConnector.server_multitransport_flags in /tmp/.tmpgonPx3/IronRDP/crates/ironrdp-connector/src/connection.rs:244
  field ClientConnector.auto_reconnect_cookie in /tmp/.tmpgonPx3/IronRDP/crates/ironrdp-connector/src/connection.rs:248
  field ConnectionResult.input_flags in /tmp/.tmpgonPx3/IronRDP/crates/ironrdp-connector/src/connection.rs:72
  field ConnectionResult.refresh_rect_support in /tmp/.tmpgonPx3/IronRDP/crates/ironrdp-connector/src/connection.rs:76
  field ConnectionResult.suppress_output_support in /tmp/.tmpgonPx3/IronRDP/crates/ironrdp-connector/src/connection.rs:78
  field Config.connection_type in /tmp/.tmpgonPx3/IronRDP/crates/ironrdp-connector/src/lib.rs:207

--- failure enum_no_repr_variant_discriminant_changed: enum variant had its discriminant change value ---

Description:
The enum's variant had its discriminant value change. This breaks downstream code that used its value via a numeric cast like `as isize`.
        ref: https://doc.rust-lang.org/reference/items/enumerations.html#assigning-discriminant-values
       impl: https://github.com/obi1kenobi/cargo-semver-checks/tree/v0.47.0/src/lints/enum_no_repr_variant_discriminant_changed.ron

Failed in:
  variant ClientConnectorState::CapabilitiesExchange 12 -> 13 in /tmp/.tmpgonPx3/IronRDP/crates/ironrdp-connector/src/connection.rs:184
  variant ClientConnectorState::ConnectionFinalization 13 -> 14 in /tmp/.tmpgonPx3/IronRDP/crates/ironrdp-connector/src/connection.rs:187
  variant ClientConnectorState::Connected 14 -> 15 in /tmp/.tmpgonPx3/IronRDP/crates/ironrdp-connector/src/connection.rs:190

--- failure enum_struct_variant_field_added: pub enum struct variant field added ---

Description:
An enum's exhaustive struct variant has a new field, which has to be included when constructing or matching on this variant.
        ref: https://doc.rust-lang.org/reference/attributes/type_system.html#the-non_exhaustive-attribute
       impl: https://github.com/obi1kenobi/cargo-semver-checks/tree/v0.47.0/src/lints/enum_struct_variant_field_added.ron

Failed in:
  field message_channel_id of variant ClientConnectorState::MultitransportBootstrapping in /tmp/.tmpgonPx3/IronRDP/crates/ironrdp-connector/src/connection.rs:146
  field requests_seen of variant ClientConnectorState::MultitransportBootstrapping in /tmp/.tmpgonPx3/IronRDP/crates/ironrdp-connector/src/connection.rs:149
  field input_flags of variant ConnectionActivationState::ConnectionFinalization in /tmp/.tmpgonPx3/IronRDP/crates/ironrdp-connector/src/connection_activation.rs:339
  field refresh_rect_support of variant ConnectionActivationState::ConnectionFinalization in /tmp/.tmpgonPx3/IronRDP/crates/ironrdp-connector/src/connection_activation.rs:340
  field suppress_output_support of variant ConnectionActivationState::ConnectionFinalization in /tmp/.tmpgonPx3/IronRDP/crates/ironrdp-connector/src/connection_activation.rs:341
  field input_flags of variant ConnectionActivationState::Finalized in /tmp/.tmpgonPx3/IronRDP/crates/ironrdp-connector/src/connection_activation.rs:353
  field refresh_rect_support of variant ConnectionActivationState::Finalized in /tmp/.tmpgonPx3/IronRDP/crates/ironrdp-connector/src/connection_activation.rs:357
  field suppress_output_support of variant ConnectionActivationState::Finalized in /tmp/.tmpgonPx3/IronRDP/crates/ironrdp-connector/src/connection_activation.rs:359

⚠ ironrdp-acceptor breaking changes

--- failure constructible_struct_adds_field: externally-constructible struct adds field ---

Description:
A pub struct constructible with a struct literal has a new pub field. Existing struct literals must be updated to include the new field.
        ref: https://doc.rust-lang.org/reference/expressions/struct-expr.html
       impl: https://github.com/obi1kenobi/cargo-semver-checks/tree/v0.47.0/src/lints/constructible_struct_adds_field.ron

Failed in:
  field AcceptorResult.multitransport_flags in /tmp/.tmpgonPx3/IronRDP/crates/ironrdp-acceptor/src/connection.rs:108
  field AcceptorResult.auto_reconnect in /tmp/.tmpgonPx3/IronRDP/crates/ironrdp-acceptor/src/connection.rs:124

⚠ ironrdp-graphics breaking changes

--- failure constructible_struct_adds_field: externally-constructible struct adds field ---

Description:
A pub struct constructible with a struct literal has a new pub field. Existing struct literals must be updated to include the new field.
        ref: https://doc.rust-lang.org/reference/expressions/struct-expr.html
       impl: https://github.com/obi1kenobi/cargo-semver-checks/tree/v0.47.0/src/lints/constructible_struct_adds_field.ron

Failed in:
  field TileState.base_quant in /tmp/.tmpgonPx3/IronRDP/crates/ironrdp-graphics/src/progressive.rs:763

⚠ ironrdp-session breaking changes

--- failure enum_variant_added: enum variant added on exhaustive enum ---

Description:
A publicly-visible enum without #[non_exhaustive] has a new variant.
        ref: https://doc.rust-lang.org/cargo/reference/semver.html#enum-variant-new
       impl: https://github.com/obi1kenobi/cargo-semver-checks/tree/v0.47.0/src/lints/enum_variant_added.ron

Failed in:
  variant ActiveStageOutput:SaveSessionInfo in /tmp/.tmpgonPx3/IronRDP/crates/ironrdp-session/src/active_stage.rs:481
  variant ActiveStageOutput:AutoReconnectCookie in /tmp/.tmpgonPx3/IronRDP/crates/ironrdp-session/src/active_stage.rs:514
  variant ProcessorOutput:SaveSessionInfo in /tmp/.tmpgonPx3/IronRDP/crates/ironrdp-session/src/x224/mod.rs:35
  variant ProcessorOutput:AutoReconnectCookie in /tmp/.tmpgonPx3/IronRDP/crates/ironrdp-session/src/x224/mod.rs:60

--- failure method_parameter_count_changed: pub method parameter count changed ---

Description:
A publicly-visible method now takes a different number of parameters, not counting the receiver (self) parameter.
        ref: https://doc.rust-lang.org/cargo/reference/semver.html#fn-change-arity
       impl: https://github.com/obi1kenobi/cargo-semver-checks/tree/v0.47.0/src/lints/method_parameter_count_changed.ron

Failed in:
  ironrdp_session::fast_path::Processor::process takes 3 parameters in /tmp/.tmplXjPko/ironrdp-session/src/fast_path.rs:59, but now takes 4 parameters in /tmp/.tmpgonPx3/IronRDP/crates/ironrdp-session/src/fast_path.rs:164
  ironrdp_session::x224::Processor::process takes 1 parameters in /tmp/.tmplXjPko/ironrdp-session/src/x224/mod.rs:128, but now takes 2 parameters in /tmp/.tmpgonPx3/IronRDP/crates/ironrdp-session/src/x224/mod.rs:168

--- failure struct_pub_field_missing: pub struct's pub field removed or renamed ---

Description:
A publicly-visible struct has at least one public field that is no longer available under its prior name. It may have been renamed or removed entirely.
        ref: https://doc.rust-lang.org/cargo/reference/semver.html#item-remove
       impl: https://github.com/obi1kenobi/cargo-semver-checks/tree/v0.47.0/src/lints/struct_pub_field_missing.ron

Failed in:
  field bulk_decompressor of struct ProcessorBuilder, previously in file /tmp/.tmplXjPko/ironrdp-session/src/fast_path.rs:603

⚠ ironrdp-server breaking changes

--- failure enum_variant_added: enum variant added on exhaustive enum ---

Description:
A publicly-visible enum without #[non_exhaustive] has a new variant.
        ref: https://doc.rust-lang.org/cargo/reference/semver.html#enum-variant-new
       impl: https://github.com/obi1kenobi/cargo-semver-checks/tree/v0.47.0/src/lints/enum_variant_added.ron

Failed in:
  variant ServerEvent:SetAutoReconnectCookie in /tmp/.tmpgonPx3/IronRDP/crates/ironrdp-server/src/server.rs:540

--- failure method_parameter_count_changed: pub method parameter count changed ---

Description:
A publicly-visible method now takes a different number of parameters, not counting the receiver (self) parameter.
        ref: https://doc.rust-lang.org/cargo/reference/semver.html#fn-change-arity
       impl: https://github.com/obi1kenobi/cargo-semver-checks/tree/v0.47.0/src/lints/method_parameter_count_changed.ron

Failed in:
  ironrdp_server::autodetect::AutoDetectManager::send_rtt_request takes 0 parameters in /tmp/.tmplXjPko/ironrdp-server/src/autodetect.rs:46, but now takes 1 parameters in /tmp/.tmpgonPx3/IronRDP/crates/ironrdp-server/src/autodetect.rs:54
  ironrdp_server::autodetect::AutoDetectManager::handle_response takes 1 parameters in /tmp/.tmplXjPko/ironrdp-server/src/autodetect.rs:62, but now takes 2 parameters in /tmp/.tmpgonPx3/IronRDP/crates/ironrdp-server/src/autodetect.rs:67
  ironrdp_server::autodetect::AutoDetectManager::expire_stale_probes takes 1 parameters in /tmp/.tmplXjPko/ironrdp-server/src/autodetect.rs:110, but now takes 2 parameters in /tmp/.tmpgonPx3/IronRDP/crates/ironrdp-server/src/autodetect.rs:120

⚠ ironrdp-agent breaking changes

--- failure enum_variant_added: enum variant added on exhaustive enum ---

Description:
A publicly-visible enum without #[non_exhaustive] has a new variant.
        ref: https://doc.rust-lang.org/cargo/reference/semver.html#enum-variant-new
       impl: https://github.com/obi1kenobi/cargo-semver-checks/tree/v0.47.0/src/lints/enum_variant_added.ron

Failed in:
  variant Payload:NowCapabilities in /tmp/.tmpgonPx3/IronRDP/crates/ironrdp-agent/src/ipc.rs:247
  variant Payload:NowOperation in /tmp/.tmpgonPx3/IronRDP/crates/ironrdp-agent/src/ipc.rs:249
  variant Payload:NowOperations in /tmp/.tmpgonPx3/IronRDP/crates/ironrdp-agent/src/ipc.rs:251
  variant Payload:NowEvent in /tmp/.tmpgonPx3/IronRDP/crates/ironrdp-agent/src/ipc.rs:253
  variant Payload:NowDiagnostics in /tmp/.tmpgonPx3/IronRDP/crates/ironrdp-agent/src/ipc.rs:255
  variant Request:NowCapabilities in /tmp/.tmpgonPx3/IronRDP/crates/ironrdp-agent/src/ipc.rs:72
  variant Request:NowRun in /tmp/.tmpgonPx3/IronRDP/crates/ironrdp-agent/src/ipc.rs:74
  variant Request:NowExecute in /tmp/.tmpgonPx3/IronRDP/crates/ironrdp-agent/src/ipc.rs:81
  variant Request:NowCancel in /tmp/.tmpgonPx3/IronRDP/crates/ironrdp-agent/src/ipc.rs:83
  variant Request:NowList in /tmp/.tmpgonPx3/IronRDP/crates/ironrdp-agent/src/ipc.rs:85
  variant Request:NowStatus in /tmp/.tmpgonPx3/IronRDP/crates/ironrdp-agent/src/ipc.rs:87
  variant Request:NowAttach in /tmp/.tmpgonPx3/IronRDP/crates/ironrdp-agent/src/ipc.rs:89
  variant Request:NowStdin in /tmp/.tmpgonPx3/IronRDP/crates/ironrdp-agent/src/ipc.rs:94
  variant Request:NowDiagnostics in /tmp/.tmpgonPx3/IronRDP/crates/ironrdp-agent/src/ipc.rs:100

Changelog

ironrdp-error

[0.2.1] - 2026-08-03

Features

• Add ergonomic cross-error mapping (#1481) (71d63c75f5)

• Add IronRDP ActiveX COM server (#1523) (ee58b7c5f2)

ironrdp-core

[0.3.0] - 2026-08-03

Features

• Add NonEmpty (#1444) (bdcc0ceec3)

  Add a NonEmpty<T> collection guaranteeing at least one element. The
  first element (head) is stored inline, so a single-element NonEmpty
  performs no heap allocation, and first() is infallible while len()
  returns a NonZeroUsize, and callers never branch on an "is it empty?"
  case.

Bug Fixes

• Rename {Read,Write}Cursor::rewinded into rewound (#1529) (c85b089b46)

ironrdp-pdu

[0.10.0] - 2026-08-03

Security

• Tolerate unknown security header flags in BasicSecurityHeader (#1458) (a4acab488b)

ironrdp-svc

[0.8.1] - 2026-08-03

Features

• Support runtime-defined static virtual channels (#1517) (8b4c483ba0)

ironrdp-connector

[0.11.0] - 2026-08-03

Security

• [breaking] Implement multitransport bootstrapping handshake (#1098) (e45fbfe0f5)

ironrdp-async

[0.11.0] - 2026-08-03

Security

• [breaking] Implement multitransport bootstrapping handshake (#1098) (e45fbfe0f5)

ironrdp-acceptor

[0.11.0] - 2026-08-03

Security

• Validate auto-reconnect cookies (#1509) (44f675e244)

ironrdp-dvc

[0.8.1] - 2026-08-03

Features

• Expose generic session configuration and lifecycle APIs (#1522) (57b1366650)

ironrdp-displaycontrol

[0.8.1] - 2026-08-03

Bug Fixes

• Decode the full headered DISPLAYCONTROL_CAPS_PDU (#1442) (3b66961a8b)

ironrdp-dvc-pipe-proxy

[0.5.1] - 2026-08-03

Bug Fixes

• Handle pre-connected Windows clients (#1447) (079b48422b)

ironrdp-graphics

[0.10.0] - 2026-08-03

Features

• Add ClearCodec client-side decode dispatch (#1175) (714dce4662)

  Follow-up to feat(pdu,graphics,egfx): add ClearCodec bitmap compression codec #1174. Supersedes feat(egfx): add send_clearcodec_frame for server-side ClearCodec transmission #1195 (the standalone server-helper PR;
  its 46-line send_clearcodec_frame() is included here).

  Wires ClearCodec into the EGFX client's WireToSurface1 codec dispatch,
  matching the existing AVC420 and Uncompressed decode patterns.

Bug Fixes

• Correct progressive base quantization scale (#1499) (ccfe5bb8b3)

ironrdp-tls

[0.2.3] - 2026-08-03

Bug Fixes

• Make certificate validation explicit (#1520) (f1d53c78d3)

  IronRDP deployments commonly use self-signed or private-CA certificates.
  This keeps the historical permissive behavior for unmodified callers
  while making platform-root and server-name validation an explicit
  opt-in.

ironrdp-rdcleanpath

[0.2.3] - 2026-08-03

Build

• Bump the crypto group across 1 directory with 3 updates (#1449) (e1725e8c8a)

ironrdp-rdpsnd

[0.9.1] - 2026-08-03

Bug Fixes

• Isolate malformed encrypted waves (#1514) (c87ab68e9c)

ironrdp-rdpsnd-native

[0.7.1] - 2026-08-03

Bug Fixes

• Make source locations opt-in (#1480) (f84cd01450)

  Default error display omits locations; alternate formatting and reports
  with explicit location opt-in preserve diagnostic context.

ironrdp-bulk

[0.2.0] - 2026-08-03

Bug Fixes

• [breaking] Always own a bulk decompressor for FastPath updates (#1255) (0dc0194418)

ironrdp-session

[0.12.0] - 2026-08-03

Security

• [breaking] Support session resume via the auto-reconnect cookie (#1501) (74b3365c1f)

  Rebased onto post-feat(client): expose generic session configuration and lifecycle APIs #1522 master. feat(server): validate auto-reconnect cookies #1509 landed the server half of
  ironrdp-server: validate + rotate the Server Auto-Reconnect Cookie (follow-up to #1405) #1508 while this was open, including the ClientAutoReconnect
  structure. This PR no longer declares it; it extends it, and picks up
  the parts feat(server): validate auto-reconnect cookies #1509 did not build.

ironrdp-client

[0.2.0] - 2026-08-03

Security

• [breaking] Support session resume via the auto-reconnect cookie (#1501) (74b3365c1f)

  Rebased onto post-feat(client): expose generic session configuration and lifecycle APIs #1522 master. feat(server): validate auto-reconnect cookies #1509 landed the server half of
  ironrdp-server: validate + rotate the Server Auto-Reconnect Cookie (follow-up to #1405) #1508 while this was open, including the ClientAutoReconnect
  structure. This PR no longer declares it; it extends it, and picks up
  the parts feat(server): validate auto-reconnect cookies #1509 did not build.

ironrdp-egfx

[0.3.1] - 2026-08-03

Features

• Add ClearCodec client-side decode dispatch (#1175) (714dce4662)

  Follow-up to feat(pdu,graphics,egfx): add ClearCodec bitmap compression codec #1174. Supersedes feat(egfx): add send_clearcodec_frame for server-side ClearCodec transmission #1195 (the standalone server-helper PR;
  its 46-line send_clearcodec_frame() is included here).

  Wires ClearCodec into the EGFX client's WireToSurface1 codec dispatch,
  matching the existing AVC420 and Uncompressed decode patterns.

• Composite client surface commands into pixel buffers (#1460) (9cd36952ca)

• Decode Planar bitmaps in the client (#1507) (66c8a81be0)

  Wires RDPGFX_CODECID_PLANAR (0x000A) into the EGFX client's
  WireToSurface1 dispatch, alongside the existing ClearCodec and
  Uncompressed paths.

• Add egfx_avc420_decode oracle and target (#1326) (cafbef1c9f)

  This change adds an assertion-or-panic fuzz oracle for the AVC
  length-prefix to Annex-B conversion that runs inside
  OpenH264Decoder::decode before any OpenH264 entry point. The same
  change refactors the conversion from a private method on
  OpenH264Decoder into two public free functions in
  ironrdp_egfx::pdu::avc. The first function, avc_to_annex_b,
  returns a fresh Vec<u8> and is symmetric with the existing
  annex_b_to_avc. The second function, avc_to_annex_b_into, writes
  into a caller-provided buffer and preserves the per-frame buffer-reuse
  optimization that OpenH264Decoder relied on.

  The conversion is now available unconditionally to any consumer of
  ironrdp-egfx. The previous #[cfg(feature = "openh264")] gating
  went with the location, not the bytes-to-bytes logic, so lifting the
  function out of decode.rs removed the gate too.

  The new oracle exercises two input distributions on every fuzz call:

  • Direct path: the oracle calls avc_to_annex_b(data) on the raw fuzz
    input. This exercises the wrapper on arbitrary byte distributions,
    including inputs that do not parse as Avc420BitmapStream.
  • Decode-chain path: the oracle tries
    Avc420BitmapStream::decode(data);
    on success it calls avc_to_annex_b(stream.data). This exercises the
    wrapper on the realistic post-decode payload distribution.

  The oracle catches panics in the wrapper, OOM allocation from
  attacker-controlled NAL length encoding, and contract violations on the
  produced Annex-B byte stream. The oracle does NOT catch OpenH264
  internal bugs (OSS-Fuzz coverage), the YUV-to-RGBA conversion path
  downstream of OpenH264 (separate workstream), or AVC444 luma plus
  chroma split (sibling target).

  Smoke fuzz ran 10,922,695 iterations in 31 seconds at ~352K exec/s
  sustained with zero crashes. Coverage settled at 158 lines, 456
  features, 69 corpus entries.

  The new target auto-discovers into CI via the cargo xtask fuzz list
  dynamic fan-out mechanism. The new check_egfx_avc420_decode
  regression-replay test in
  crates/ironrdp-testsuite-core/tests/fuzz_regression.rs runs against
  the seed corpus and passes.

Bug Fixes

• Preserve AVC_DISABLED during negotiation (#1490) (c5bd574c8a)

• Add spec-compliant Planar frame sender (#1498) (409b256b41)

ironrdp-server

[0.14.0] - 2026-08-03

Security

• Send the Server Auto-Reconnect Cookie during logon (#1405) (7d35d65248)

ironrdp

[0.18.0] - 2026-08-03

Features

• Expose generic session configuration and lifecycle APIs (#1522) (57b1366650)

ironrdp-blocking

[0.11.0] - 2026-08-03

Security

• [breaking] Implement multitransport bootstrapping handshake (#1098) (e45fbfe0f5)

ironrdp-agent

[0.2.0] - 2026-08-03

Security

• Restrict Windows named pipe to the current user (#1482) (26821836b7)

ironrdp-viewer

[0.1.1] - 2026-08-03

Features

• Expose generic session configuration and lifecycle APIs (#1522) (57b1366650)

---

This PR was generated with release-plz.

[Copilot]

Pull request overview

Prepares ironrdp-core 0.2.2 for publication with synchronized metadata and lockfiles.

Changes:

• Bumps ironrdp-core from 0.2.1 to 0.2.2.
• Adds the generated release changelog.
• Refreshes workspace and fuzz lockfiles.

Reviewed changes

Copilot reviewed 2 out of 4 changed files in this pull request and generated no comments.

File	Description
crates/ironrdp-core/Cargo.toml	Updates the crate version.
crates/ironrdp-core/CHANGELOG.md	Documents the 0.2.2 release.
Cargo.lock	Synchronizes the workspace lockfile.
fuzz/Cargo.lock	Synchronizes the fuzz lockfile.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.