chore: bump version to 0.4.0

Release highlights:
- Air-gapped verification infrastructure for embedded devices
- Trust Bundle format for offline Sigstore verification
- TUF integration for fetching Sigstore trusted root
- Storage abstraction (TrustStore/KeyStore traits) for HSM/TPM
- Time abstraction for embedded devices without RTC
- CLI bundle commands: fetch, inspect, verify
- Fuzz testing targets for security-critical code
- Certificate pinning for Sigstore endpoints
- Improved error handling throughout

Author: avrabe

Cargo.toml

@@ -10,7 +10,7 @@ exclude = [
 ]
 
 [workspace.package]
-version = "0.3.1"
+version = "0.4.0"
 edition = "2024"
 authors = ["Frank Denis <[email protected]>"]
 license = "MIT"

src/cli/Cargo.toml

@@ -31,4 +31,4 @@ regex = "1.12.2"
 ureq = { version = "3.1.2" }
 uri_encode = { version = "1.0.3" }
 wasi = { version = "0.14.7" }
-wsc = { version = "0.3.0", path = "../lib" }
+wsc = { version = "0.4.0", path = "../lib" }

src/component/Cargo.toml

@@ -12,7 +12,7 @@ crate-type = ["cdylib"]
 
 [dependencies]
 # Core signing library
-wsc = { version = "0.3.0", path = "../lib" }
+wsc = { version = "0.4.0", path = "../lib" }
 
 # WIT bindings generation
 wit-bindgen = { version = "0.47.0", default-features = false, features = ["realloc"] }