release(2.0.0): train with guard-core-rs 4.4.0

CHANGELOG.md

@@ -2,8 +2,18 @@
 
 All notable changes to this project.
 
-Unreleased
-----------
+v2.0.0 (2026-10-16)
+-------------------
+
+The reference-parity release, training with the 4.4.0 engine: route country rules and the unknown client identity, live dynamic rules, validated config, strict routes, the body read timeout and the agent from config (v2.0.0)
+--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
+
+### Breaking
+
+- `GuardConfigError` gains the `Config` variant (the engine now runs `SecurityConfig::validate` before wiring) and the `Agent` variant (an agent built from the `agent_*` fields that fails under `agent_strict`), so an exhaustive `match` over it needs arms for both.
+- Trains with the engine: the `guard-core-engine` and `guard-core-rs` floors move to 4.4.0, and the optional `guard-agent-rs` to 3.2.4. `SecurityConfig` gains public fields, so a struct literal needs `..Default::default()`; an invalid IP list entry is now reported as `Config` instead of `IpGate`.
+- Behavior to know before upgrading: a route whitelist match no longer overrides a blocked country, the unknown client identity is denied on a route with an `ip_whitelist` or `whitelist_countries`, route usage rules run after the security pipeline, each dynamic rule version applies over the base config instead of stacking, a request body that does not arrive within `body_read_timeout` is answered 408, and `route_resolution_strict` answers an unresolved route with 500.
+
 
 The parity release: the reference `exclude_paths`, client and response-pass semantics, and the whole `SecurityConfig` through the facade's `Wiring`.
 

Cargo.toml

@@ -3,7 +3,7 @@ members = ["examples/simple_app", "examples/advanced_app"]
 
 [package]
 name = "rocket-guard-rs"
-version = "1.5.0"
+version = "2.0.0"
 edition = "2024"
 rust-version = "1.92"
 description = "Application-layer security Fairing for Rocket, powered by the guard-core-rs engine. Part of the guard ecosystem."
@@ -21,13 +21,13 @@ name = "rocket_guard_rs"
 # engine crate inside a sibling guard-core-rs checkout so local builds and CI
 # (see .github/workflows/ci.yml) exercise the engine from source. The version
 # pin stays in lockstep with the published engine release.
-guard-core-engine = { path = "../guard-core-rs/crates/guard-core-engine", version = "4.3.2" }
+guard-core-engine = { path = "../guard-core-rs/crates/guard-core-engine", version = "4.4.0" }
 # The engine facade (the event bus, observability knobs, the on_block hook,
 # custom error responses, and the rate-limit stage the fairing delegates to).
 # Path points at the sibling guard-core-rs checkout so local builds and CI
 # exercise it from source; the version pin stays in lockstep with the
 # published facade release.
-guard-core-rs = { path = "../guard-core-rs/crates/guard-core-rs", version = "4.3.2" }
+guard-core-rs = { path = "../guard-core-rs/crates/guard-core-rs", version = "4.4.0" }
 rocket = { version = "0.5.1", default-features = false }
 rocket_ws = { version = "0.1.1", features = ["tokio-tungstenite"] }
 serde_json = "1"
@@ -38,7 +38,7 @@ chrono = "0.4"
 # depends on the guard-core-rs facade (its `guard-core` feature), never the
 # reverse, so the facade cannot own this and each adapter does. The runtime
 # handle the agent's async tasks run on comes from the caller's tokio runtime.
-guard-agent-rs = { version = "3.2.3", optional = true, default-features = false, features = ["guard-core"] }
+guard-agent-rs = { version = "3.2.4", optional = true, default-features = false, features = ["guard-core"] }
 tokio = { version = "1", optional = true, default-features = false, features = ["rt"] }
 
 [features]

examples/advanced_app/Cargo.toml

@@ -8,7 +8,7 @@ description = "Production-shaped rocket-guard-rs example service."
 
 [dependencies]
 rocket = { version = "0.5.1", default-features = false, features = ["json"] }
-rocket-guard-rs = { path = "../..", version = "1.5.0" }
+rocket-guard-rs = { path = "../..", version = "2.0.0" }
 tokio = { version = "1", features = ["macros", "rt-multi-thread"] }
 
 [lints.rust]

examples/simple_app/Cargo.toml

@@ -8,7 +8,7 @@ description = "Minimal rocket-guard-rs example service."
 
 [dependencies]
 rocket = { version = "0.5.1", default-features = false, features = ["json"] }
-rocket-guard-rs = { path = "../..", version = "1.5.0" }
+rocket-guard-rs = { path = "../..", version = "2.0.0" }
 tokio = { version = "1", features = ["macros", "rt-multi-thread"] }
 
 [lints.rust]