release: prepare dlp v2.0.1 and dlp-api v4.0.1

Author: snawaz

Cargo.lock

@@ -1,7 +1,7 @@
 [package]
 name = "magicblock-delegation-program"
 description = "Delegation program for the Ephemeral Rollups"
-version = "2.0.0"
+version = "2.0.1"
 authors = ["Magicblock Labs <dev@magicblock.gg>"]
 edition = "2021"
 license = "MIT"

Cargo.toml

@@ -9,7 +9,7 @@ homepage = "https://www.magicblock.gg/"
 keywords = ["crypto", "delegation", "ephemeral-rollups", "magicblock", "solana"]
 license = "MIT"
 repository = "https://github.com/magicblock-labs/delegation-program"
-version = "4.0.0"
+version = "4.0.1"
 
 [lib]
 name = "dlp_api"

dlp-api/Cargo.toml

@@ -0,0 +1,9 @@
+# Release Notes
+
+## dlp-api 4.0.1
+
+`cleartext_with_insertable` now gives a signer meta a signer-table entry when its pubkey was previously inserted as a non-signer. It also permits a non-signer meta to reuse an inserted signer entry. The compact action serialization and public API are unchanged.
+
+When a new signer entry is required, the caller must supply that pubkey as a signed account to `DelegateWithActions`. The non-signer-to-signer case generated by `dlp-api` 4.0.0 was rejected by the program already; 4.0.1 corrects its table index. The signer-to-non-signer case requires the matching program fix in `dlp@v2.0.1`.
+
+Changes since `dlp-api@v4.0.0`: [compare](https://github.com/magicblock-labs/delegation-program/compare/dlp-api@v4.0.0...main) · [#187](https://github.com/magicblock-labs/delegation-program/pull/187).

release-notes/dlp-api-v4.0.1.md

@@ -0,0 +1,11 @@
+# Release Notes
+
+## Delegation program 2.0.1
+
+`DelegateWithActions` now accepts a cleartext non-signer account meta that refers to a signer entry in the compact pubkey table. A signer meta must still refer to signer storage, and every pubkey in signer storage must have a signed account in the instruction. This fixes mixed signer/non-signer use in post-delegation actions without changing the instruction format.
+
+Clients built with `dlp-api` 4.0.0 that produced valid requests for program 2.0.0 remain compatible. An older client's `cleartext_with_insertable` output still fails when a key inserted as a non-signer is later used as a signer; that output was also rejected by program 2.0.0. Use `dlp-api` 4.0.1 for that case.
+
+Changes since `dlp@v2.0.0`: [compare](https://github.com/magicblock-labs/delegation-program/compare/dlp@v2.0.0...main) · [#187](https://github.com/magicblock-labs/delegation-program/pull/187).
+
+This release records source version 2.0.1. Program deployment and executable verification are separate; cluster, program ID, deployed source commit, and executable hash are not yet available for these notes.