v0.2.4

Maintenance release. No library or CLI source changes — dependency
bumps and CI housekeeping only.

Changed

• Bumped aws-config from 1.8.17 to 1.8.18.
• Bumped aws-sdk-s3 from 1.134.0 to 1.135.0.
• Bumped aws-smithy-http-client from 1.1.12 to 1.1.13.
• Bumped pinned GitHub Actions in the actions Dependabot group
  (actions/checkout 6.0.2 to 6.0.3, github/codeql-action 4.36.0
  to 4.36.2, taiki-e/install-action 2.79.15 to 2.81.6).

v0.2.3

Maintenance release. No library or CLI source changes — dependency
bumps and CI housekeeping only.

Changed

• Bumped aws-sdk-s3 from 1.133.0 to 1.134.0.
• Bumped reqwest from 0.13.3 to 0.13.4.
• Bumped uuid from 1.23.1 to 1.23.2.
• Bumped gix-hash from 0.25.0 to 0.25.1.
• Bumped the transitive tar crate from 0.4.45 to 0.4.46.
• Bumped pinned GitHub Actions in the actions Dependabot group
  (taiki-e/install-action, docker/setup-qemu-action).

v0.2.2

Maintenance release. No library or CLI source changes — dependency
bumps and CI housekeeping only.

Changed

• Bumped aws-config from 1.8.16 to 1.8.17.
• Bumped aws-sdk-s3 from 1.132.0 to 1.133.0.
• Bumped serde_json from 1.0.149 to 1.0.150.
• Bumped astral-tokio-tar to 0.6.2 and cleaned the corresponding
  cargo deny ignores.
• Bumped pinned GitHub Actions in the actions Dependabot group.

v0.2.1

First release cut end-to-end by the CI release pipeline. 0.2.0 was
manually published to crates.io to bootstrap Trusted Publisher
registration and so has no matching GitHub Release artifacts (no
pre-built binaries, no .deb / .rpm / .apk packages, no SLSA
provenance). 0.2.1 ships byte-identical library and CLI source plus
the full automated-release artifact set.

Fixed

• Release workflow preflight version-parity check read every
  cargo metadata dependencies[] entry, including
  cli/Cargo.toml's path-only dev-dep that opts the integration
  tests into the library's test-util feature. The dev-dep has no
  version = field, so the requirement came back as * and the
  strip-and-compare against the tag version failed. Filter the
  query to normal-kind dependencies only, materialise the result as
  a JSON array, validate cardinality first, and emit case-specific
  error messages for missing / multiple / drifted entries.