chore: release v0.14.0

[github-actions]

🤖 New release

• world-id-primitives: 0.13.0 -> 0.14.0 (⚠ API breaking changes)
• world-id-proof: 0.13.0 -> 0.14.0 (✓ API compatible changes)
• world-id-registries: 0.13.0 -> 0.14.0
• world-id-authenticator: 0.13.0 -> 0.14.0 (✓ API compatible changes)
• world-id-issuer: 0.13.0 -> 0.14.0
• world-id-core: 0.13.0 -> 0.14.0 (✓ API compatible changes)

⚠ world-id-primitives breaking changes

--- failure constructible_struct_adds_field: externally-constructible struct adds field ---

Description:
A pub struct constructible with a struct literal has a new pub field. Existing struct literals must be updated to include the new field.
        ref: https://doc.rust-lang.org/reference/expressions/struct-expr.html
       impl: https://github.com/obi1kenobi/cargo-semver-checks/tree/v0.46.0/src/lints/constructible_struct_adds_field.ron

Failed in:
  field NullifierOprfRequestAuthV1.created_at in /tmp/.tmp7Jcobn/world-id-protocol/crates/primitives/src/oprf.rs:50
  field NullifierOprfRequestAuthV1.expires_at in /tmp/.tmp7Jcobn/world-id-protocol/crates/primitives/src/oprf.rs:53

--- failure enum_variant_missing: pub enum variant removed or renamed ---

Description:
A publicly-visible enum has at least one variant that is no longer available under its prior name. It may have been renamed or removed entirely.
        ref: https://doc.rust-lang.org/cargo/reference/semver.html#item-remove
       impl: https://github.com/obi1kenobi/cargo-semver-checks/tree/v0.46.0/src/lints/enum_variant_missing.ron

Failed in:
  variant WorldIdRequestAuthError::TimestampTooOld, previously in file /tmp/.tmpzhwifq/world-id-primitives/src/oprf.rs:114
  variant WorldIdRequestAuthError::TimestampTooFarInFuture, previously in file /tmp/.tmpzhwifq/world-id-primitives/src/oprf.rs:118

--- failure pub_module_level_const_missing: pub module-level const is missing ---

Description:
A public const is missing or renamed
        ref: https://doc.rust-lang.org/cargo/reference/semver.html#item-remove
       impl: https://github.com/obi1kenobi/cargo-semver-checks/tree/v0.46.0/src/lints/pub_module_level_const_missing.ron

Failed in:
  TIMESTAMP_TOO_FAR_IN_FUTURE in file /tmp/.tmpzhwifq/world-id-primitives/src/oprf.rs:351
  TIMESTAMP_TOO_OLD in file /tmp/.tmpzhwifq/world-id-primitives/src/oprf.rs:327

--- failure struct_pub_field_missing: pub struct's pub field removed or renamed ---

Description:
A publicly-visible struct has at least one public field that is no longer available under its prior name. It may have been renamed or removed entirely.
        ref: https://doc.rust-lang.org/cargo/reference/semver.html#item-remove
       impl: https://github.com/obi1kenobi/cargo-semver-checks/tree/v0.46.0/src/lints/struct_pub_field_missing.ron

Failed in:
  field current_time_stamp of struct NullifierOprfRequestAuthV1, previously in file /tmp/.tmpzhwifq/world-id-primitives/src/oprf.rs:49
  field expiration_timestamp of struct NullifierOprfRequestAuthV1, previously in file /tmp/.tmpzhwifq/world-id-primitives/src/oprf.rs:51

Changelog

world-id-primitives

0.14.0 - 2026-07-13

Added

• (node) check expires_at max difference (#853)
• add is_blocked at node (#848)

Other

• [breaking] rename proof module to nullifier_proof (#847)

---

This PR was generated with release-plz.

---

Note

Medium Risk
The diff is version-only, but publishing 0.14.0 exposes breaking world-id-primitives API changes that downstream crates must upgrade against.

Overview
Release v0.14.0 — bumps the workspace and internal world-id-* crates from 0.13.0 to 0.14.0 in Cargo.toml, Cargo.lock, and adds the 0.14.0 section to CHANGELOG.md (no runtime code changes in this diff).

The changelog records what ships in this release: OPRF node expires_at max-difference validation, is_blocked enforcement for RPs on the node, and a breaking rename of the primitives proof module to nullifier_proof. Consumers of world-id-primitives should expect semver-breaking API changes (e.g. NullifierOprfRequestAuthV1 field renames/additions and removed WorldIdRequestAuthError / timestamp constants) already called out by release tooling.

^{Reviewed by Cursor Bugbot for commit 39ef39b. Bugbot is set up for automated code reviews on this repo. Configure here.}