chore(release): v0.258.0 -- the reward-distributor RPC surface

Cargo.toml

@@ -33,7 +33,7 @@ edition = "2021"
 # release to fire (§3.6). The library crates (dig-node-core/dig-runtime/dig-wallet)
 # keep their own independent versions — only the released binary tracks the workspace version.
 
-version = "0.257.0"
+version = "0.258.0"
 # Release hardening, matching digstore: keep integer-overflow checks ON in release.
 # The node parses untrusted serialized input and does offset/length arithmetic over
 # it, so silent wrapping in release would turn a length bug into a memory/logic hazard.

crates/dig-node-core/Cargo.toml

@@ -191,7 +191,14 @@ serde_json = "1"
 # per-method tier) and the mTLS peer-reachability allowlist. dig-node-core reads its
 # method names + the peer allowlist from HERE (never hand-rolled) so the contract
 # cannot drift from the other node implementation or the discovery document (#1075).
-dig-rpc-protocol = "0.11.0"
+#
+# Moved to 0.12 (dig_ecosystem#3269, final leg): 0.12.0 is the release this node adopts the reward
+# RPC surface from (`Method::ListRewardDistributors`, `Method::GetPayeeRewardClaimStatus`, and the
+# `GetRewardProverStatusResult.statuses` shape change to `Half<RewardProverStatus>`). `dig-peer`
+# (0.15.0), `dig-download` (0.24.0) and `dig-peer-selector` (0.13.0) below all moved onto this line
+# in the same batch, so exactly one `dig-rpc-protocol` still resolves (asserted by
+# `crates/dig-node-core/tests/dependency_tree.rs`).
+dig-rpc-protocol = "0.12"
 # The directed-message base protocol (epic #793/#796): the e2e seal/open pipeline + the typed envelope
 # the chat subsystem seals into. dig-node is the TRANSPORT — it seals an app-supplied opaque DIGCHAT1
 # envelope to the recipient's 0x0010 BLS identity key and dig-gossip directed-sends the sealed bytes.
@@ -461,7 +468,10 @@ dig-pex = "0.1.1"
 # Moved to 0.23 (dig_ecosystem#3269): 0.23.0 is the release that re-exports `dig-rpc-protocol` 0.11's
 # `ModuleInfo`, closing the two-shapes split this crate's own `dig-rpc-protocol = "0.11.0"` line above
 # opened against dig-download's prior 0.22-line dependency on `dig-rpc-protocol` 0.10.3.
-dig-download = "0.23"
+#
+# Moved to 0.24 (dig_ecosystem#3269, final leg): 0.24.0 is on `dig-rpc-protocol` 0.12, matching this
+# crate's own move to 0.12 above.
+dig-download = "0.24"
 # -- The shared peer client (#1283/#1576) -------------------------------------------------------------
 # `DigPeer` — the ONE DIG Network peer client: peer_id-pinned mTLS over the full NAT ladder plus typed
 # RPC. Depended on DIRECTLY (not only transitively through dig-download) because dig-node supplies the
@@ -476,7 +486,10 @@ dig-download = "0.23"
 #
 # Moved to 0.14 (dig_ecosystem#3269), alongside dig-download's move to 0.23 above, for the same
 # reason: 0.14.0 is on `dig-rpc-protocol` 0.11, keeping exactly one version resolving.
-dig-peer = "0.14"
+#
+# Moved to 0.15 (dig_ecosystem#3269, final leg): 0.15.0 is on `dig-rpc-protocol` 0.12, matching this
+# crate's own move to 0.12 above.
+dig-peer = "0.15"
 # -- Self-optimizing peer selection (#178) ------------------------------------------------------------
 # The decision + learning layer between dig-dht discovery and dig-download execution: it ranks the
 # providers `find_providers` returns (learning throughput/rtt/reliability + a per-class saturation
@@ -509,7 +522,10 @@ dig-peer = "0.14"
 # 0.23.0, dig-peer-selector 0.12.0). Every prior `dig-peer-selector` release — through 0.11.1 —
 # stayed on `dig-peer ^0.13`, which is what pinned this crate's `dig-peer` line above at 0.13 and
 # kept two `dig-rpc-protocol` versions resolving simultaneously.
-dig-peer-selector = "0.12"
+#
+# Moved to 0.13 (dig_ecosystem#3269, final leg): 0.13.0 is on `dig-peer ^0.15`, matching this crate's
+# own move to `dig-peer = "0.15"` above and closing the cascade at `dig-rpc-protocol` 0.12.
+dig-peer-selector = "0.13"
 # The canonical DIG mTLS certificate crate (L00, crates.io). The node's PERSISTENT machine identity
 # is a CA-signed `dig_tls::NodeCert` minted from the node's own BLS identity key and persisted 0600 in
 # the data dir (#908 identity boundary: this is the MACHINE key, never a user key). Replaces the
@@ -593,7 +609,7 @@ rcgen = "0.13"
 #
 # Pinned by the `the_fail_open_anchor_verifier_is_not_reachable_from_a_production_build` test, which
 # fails if `testkit` ever appears on the production entry.
-dig-download = { version = "0.23", features = ["testkit"] }
+dig-download = { version = "0.24", features = ["testkit"] }
 # Captures the peer-facing serve's real emitted tracing records into an in-memory buffer, so the
 # serve-observability tests (#1595) assert what an operator would actually see in the node log —
 # and that no payload byte or proof ever reaches it.