From 52fa732b85f6918c74c139c55042334b1b234978 Mon Sep 17 00:00:00 2001
From: Matt Swann <mswann@microsoft.com>
Date: Mon, 5 Oct 2026 09:15:31 -0700
Subject: [PATCH] Bump NuGet packages to 4.5.0

---
 Microsoft.O365.Security.Native.ETW/AssemblyInfo.cpp |  2 +-
 O365.Security.Native.ETW.Debug.nuspec               |  9 +++++----
 O365.Security.Native.ETW.nuspec                     |  9 +++++----
 krabsetw.nuspec                                     | 10 ++++++----
 4 files changed, 17 insertions(+), 13 deletions(-)

diff --git a/Microsoft.O365.Security.Native.ETW/AssemblyInfo.cpp b/Microsoft.O365.Security.Native.ETW/AssemblyInfo.cpp
index 72520c5d..9eafdb8f 100644
--- a/Microsoft.O365.Security.Native.ETW/AssemblyInfo.cpp
+++ b/Microsoft.O365.Security.Native.ETW/AssemblyInfo.cpp
@@ -32,7 +32,7 @@ using namespace System::Security::Permissions;
 // You can specify all the value or you can default the Revision and Build Numbers
 // by using the '*' as shown below:
 
-[assembly:AssemblyVersionAttribute("4.4.7.0")];
+[assembly:AssemblyVersionAttribute("4.5.0.0")];
 
 [assembly:ComVisible(false)];
 
diff --git a/O365.Security.Native.ETW.Debug.nuspec b/O365.Security.Native.ETW.Debug.nuspec
index d05938d7..f382ccc7 100644
--- a/O365.Security.Native.ETW.Debug.nuspec
+++ b/O365.Security.Native.ETW.Debug.nuspec
@@ -2,7 +2,7 @@
 <package xmlns="http://schemas.microsoft.com/packaging/2011/08/nuspec.xsd">
     <metadata>
         <id>Microsoft.O365.Security.Native.ETW.Debug</id>
-        <version>4.4.9</version>
+        <version>4.5.0</version>
         <title>Microsoft.O365.Security.Native.ETW Debug - managed wrappers for krabsetw</title>
         <authors>Microsoft</authors>
         <owners>Microsoft</owners>
@@ -12,9 +12,10 @@
         <description>Microsoft.O365.Security.Native.ETW Debug is a managed wrapper around the krabsetw ETW library. This is the Debug build.</description>
         <summary>Microsoft.O365.Security.Native.ETW Debug is a managed wrapper around the krabsetw ETW library. This is the Debug build.</summary>
         <releaseNotes>
-            Version 4.4.9:
-              - Optimize parser property lookup with last property hinted linear scan
-              - Add hinted parse/try_parse/view_of overloads accepting a ULONG property index hint
+            Version 4.5.0:
+              - Add Provider.EnableTraceLoggingFullSchemaHashing() to distinguish TraceLogging events that reuse a name with different fields. Call it before enabling the provider; hashing is disabled by default.
+              - Bound underlying TraceLogging event-name reads and validate metadata lengths, including metadata within larger extended-data buffers.
+              - Fix underlying schema-key copy assignment recursion and preserve owned event names, including assignments from borrowed names.
         </releaseNotes>
         <copyright>© Microsoft Corporation. All rights reserved.</copyright>
         <language />
diff --git a/O365.Security.Native.ETW.nuspec b/O365.Security.Native.ETW.nuspec
index ca20d974..bd03379d 100644
--- a/O365.Security.Native.ETW.nuspec
+++ b/O365.Security.Native.ETW.nuspec
@@ -2,7 +2,7 @@
 <package xmlns="http://schemas.microsoft.com/packaging/2011/08/nuspec.xsd">
     <metadata>
         <id>Microsoft.O365.Security.Native.ETW</id>
-        <version>4.4.9</version>
+        <version>4.5.0</version>
         <title>Microsoft.O365.Security.Native.ETW - managed wrappers for krabsetw</title>
         <authors>Microsoft</authors>
         <owners>Microsoft</owners>
@@ -12,9 +12,10 @@
         <description>Microsoft.O365.Security.Native.ETW is a managed wrapper around the krabsetw ETW library.</description>
         <summary>Microsoft.O365.Security.Native.ETW is a managed wrapper around the krabsetw ETW library.</summary>
         <releaseNotes>
-            Version 4.4.9:
-              - Optimize parser property lookup with last property hinted linear scan
-              - Add hinted parse/try_parse/view_of overloads accepting a ULONG property index hint
+            Version 4.5.0:
+              - Add Provider.EnableTraceLoggingFullSchemaHashing() to distinguish TraceLogging events that reuse a name with different fields. Call it before enabling the provider; hashing is disabled by default.
+              - Bound underlying TraceLogging event-name reads and validate metadata lengths, including metadata within larger extended-data buffers.
+              - Fix underlying schema-key copy assignment recursion and preserve owned event names, including assignments from borrowed names.
         </releaseNotes>
         <copyright>© Microsoft Corporation. All rights reserved.</copyright>
         <language />
diff --git a/krabsetw.nuspec b/krabsetw.nuspec
index 9202b86c..7f2504cb 100644
--- a/krabsetw.nuspec
+++ b/krabsetw.nuspec
@@ -2,7 +2,7 @@
 <package xmlns="http://schemas.microsoft.com/packaging/2011/08/nuspec.xsd">
     <metadata>
         <id>Microsoft.O365.Security.Krabsetw</id>
-        <version>4.4.9</version>
+        <version>4.5.0</version>
         <title>Krabs ETW Wrappers</title>
         <authors>Microsoft</authors>
         <owners>Microsoft</owners>
@@ -12,9 +12,11 @@
         <description>Krabs ETW provides a modern C++ wrapper around the low-level ETW trace consumption functions</description>
         <summary>Krabs ETW provides a modern C++ wrapper around the low-level ETW trace consumption functions</summary>
         <releaseNotes>
-            Version 4.4.9:
-              - Optimize parser property lookup with last property hinted linear scan
-              - Add hinted parse/try_parse/view_of overloads accepting a ULONG property index hint
+            Version 4.5.0:
+              - Add opt-in, per-provider full TraceLogging schema hashing to distinguish events that reuse a name with different fields. Call enable_trace_logging_full_schema_hashing() before enabling the provider; hashing is disabled by default.
+              - Bound TraceLogging event-name reads and validate metadata lengths, including metadata within larger extended-data buffers.
+              - Fix schema-key copy assignment recursion and preserve owned event names, including assignments from borrowed names.
+              - Add user-trace provider-enable error callbacks via set_enable_provider_error_callback(). A handled failure can allow the remaining providers to be enabled.
         </releaseNotes>
         <copyright>© Microsoft Corporation. All rights reserved.</copyright>
         <language />