CLI 0.4.6

CLI 0.4.6 updates Rustls certificate verification and trust roots for the October 2026 RustSec advisories. It also refreshes the maintained SSPI dependency, removes yanked dependency versions, and updates the browser-test tooling to the fixed ZIP implementation. Topic administration and typed topic settings from 0.4.5 are retained.

Validation: main CI, main image, and multi-platform release image passed at 12db25ef80e1a8dd1f4cc6eed230b8c30360cd7b. Full Cargo dependency policy passes without new advisory ignores.

The AMD64 release child matches the tested main image exactly. Independent SLSA verification checks the release workflow, v0.4.6 tag, source commit, image digest, and hosted runner identity. The Linux AMD64 binary was extracted verbatim from the checksum-verified image layer and reports krabka 0.4.6. Checksums and provenance are attached.

Image: ghcr.io/krabka-io/krabka-cli@sha256:f9c8cab077a043cb9d003a34c34babef05aeb37ba660990a3d418247ddcd88ad (Linux AMD64 and ARM64).

CLI v0.4.5

CLI 0.4.5 accepts the broker's typed diskless, delivery and schema-validation topic settings, with boolean/integer validation and the existing Kafka error handling. Topic administration tests now verify the aggregate partition count and detailed partition array separately.

Validation: main CI, main image, multi-platform preflight, and release image passed. The release's AMD64 child matches the tested main image byte-for-byte. SLSA provenance verifies the v0.4.5 tag, workflow and source commit.

The attached Linux AMD64 binary was extracted from that verified image. Its checksum and extraction provenance are attached alongside the image provenance verification.

Security update (2026-10-20)

This release includes TLS dependencies affected by the October 2026 RustSec advisories, including RUSTSEC-2026-0381 and RUSTSEC-2026-0382. Fixed in CLI 0.4.6.

Krabka CLI v0.4.4

Fixes formatting and inspection of broker 1.x storage. The CLI now embeds the released 1.0.5 formatter, writes the versioned bootstrap stream and manifest required by 1.x brokers, and rejects missing or unknown stream versions when inspecting storage.

Bazel-built binaries now report the correct CLI version. The Kafka conformance check also accounts for the broker's private krabka.version feature in the supported-feature diagnostic.

Both build systems use Rust 1.99.1, with matching LLVM coverage tools. External Rust dependency resolutions are preserved apart from the six formatter-related broker libraries.

The container image supports linux/amd64 and linux/arm64. The standalone linux/amd64 binary is extracted verbatim from the checksum-verified application layer of the published release image. The attached checksum and provenance record identify the source commit, image index, platform manifest and layer.

Image: ghcr.io/krabka-io/krabka-cli@sha256:dd52b3d0d1c7789356871b278600d111505bab51a0842405029cc96bc408dc01

Validation:

• Main CI passed at source commit 71a4844569749fdddd05c8e575cad50f6ad24036.
• Full container conformance passed on identical application source.
• AMD64/ARM64 preflight and release-image publication passed.
• Independent verification confirmed SLSA v1 provenance for this tag and source commit. The AMD64 child is identical to the image published from green main CI. The extracted binary reports krabka 0.4.4 and writes the versioned broker 1.x bootstrap files.

krabka-cli 0.4.3

krabka-cli 0.4.3

Git source and image release with coordinated Krabka dependencies. Deprecated Crabka crates.io dependencies are removed.

Source: b39dc88d0da3792db02ad62469b45f4fe312ea75

Image: ghcr.io/krabka-io/krabka-cli@sha256:a907a598629cd9b1d2d40650bc95fba0c3265d4892570c9c8e4c3ac3c8802cd6

Validation: PR checks, exact merged main CI, and applicable tag delivery checks passed. Rust crates are consumed from Git and are not published to crates.io.

krabka CLI v0.4.2

Pins gres at the commit that keys the tenant config snapshot record by tenant name (#43). The tenant registry topic is compacted, and Kafka refuses keyless records on compacted topics, so krabka gres create-tenant failed against a Kafka-exact broker. Also fixes a flaky SCRAM fixture test (#44).

krabka CLI v0.4.1

Adds the built-in krabka gres tenant-management command and publishes the CLI as an apko/Wolfi multi-platform image for linux/amd64 and linux/arm64.

krabka CLI v0.4.0

First qualified krabka CLI artifact.

Milestone 20 evidence includes the authenticated three-broker admin matrix: topic create/configure/delete, persisted ACL denial, offset reset/state, invalid input, feature inspection, and reassignment progress/completion.

Broker candidate: ghcr.io/krabka-io/krabka-broker@sha256:886fbe511a0cadacec0c352fe10b295063b3807c0df133d2fce4ea804f4fffcd