From 3f607d426882b91d893db61c252ce6d8568ad852 Mon Sep 17 00:00:00 2001
From: "github-actions[bot]"
 <41898282+github-actions[bot]@users.noreply.github.com>
Date: Mon, 17 Aug 2026 22:38:51 +0000
Subject: [PATCH] chore: release @nestm/crypto (alpha)

---
 .changeset/pre.json | 1 +
 CHANGELOG.md        | 8 ++++++++
 package.json        | 2 +-
 3 files changed, 10 insertions(+), 1 deletion(-)

diff --git a/.changeset/pre.json b/.changeset/pre.json
index 7083233..2408c45 100644
--- a/.changeset/pre.json
+++ b/.changeset/pre.json
@@ -6,6 +6,7 @@
   },
   "changesets": [
     "azure-wrapping-context-fail-closed",
+    "fresh-only-key-wrappers",
     "initial-crypto-release",
     "quiet-wrappers-simplify",
     "recipient-addressed-seal",
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 1e44117..44664cd 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,5 +1,13 @@
 # @nestm/crypto
 
+## 0.1.0-alpha.5
+
+### Minor Changes
+
+- 8e48467: Make the local AES key ring fresh-format only: unwrap accepts exactly the 81-byte salted version 2
+  wrapper and its `NESTM-A256GCM-HKDF-SHA256-SALT256-V2` identifier. Remove the deprecated version 1
+  algorithm export and compatibility path; development data using another wrapper format must be reset.
+
 ## 0.1.0-alpha.4
 
 ### Minor Changes
diff --git a/package.json b/package.json
index 9144da0..1b94d5d 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
 	"name": "@nestm/crypto",
-	"version": "0.1.0-alpha.4",
+	"version": "0.1.0-alpha.5",
 	"description": "Authenticated encryption for NestJS 12 with AES-256-GCM, envelope key providers, tenant isolation, and HTTP/Prisma field adapters.",
 	"license": "MIT",
 	"author": "nestm",