Repository navigation
Releases: packdb-oss/packdb-cli
Release list
packdb-cli 0.2.4
PackDB query CLI 0.2.4
- Build against SDK 0.2.4. Query flags, output and exit codes are unchanged.
- Replace the LICENSE files (repository root,
packdb-query-cli, and the copy in each binary archive) with the verbatim Apache License 2.0 text. CLI 0.2.0–0.2.3 shipped an altered text: the Trademarks clause (section 6) was missing, sections 7 to 9 were renumbered 6 to 8, the copyright grant wording differed, and section 9 was retitled. The CLI's licensing (Apache-2.0, as declared inCargo.tomland the source headers) is unchanged. - Use
rustls-webpki0.103.16 andwebpki-root-certs1.0.10, addressing RUSTSEC-2026-0382 and RUSTSEC-2026-0383.
This release supersedes CLI 0.2.0–0.2.3. Prefer 0.2.4 for new installations. Old tags and asset bytes are preserved for provenance.
The release binaries are built from the committed lockfile. --locked reproduces the reviewed dependency versions (cargo build --locked, cargo install --locked). Unlocked builds may also resolve patched versions; verify the resolved versions and audit the resulting lockfile.
Linux x86_64 GNU and macOS arm64 binaries are built and tested natively with flight-sql. Linux retains the declared glibc 2.35 floor. macOS binaries are not notarized. Packages remain unpublished to crates.io.
Qualified source: 5aaa6cb8d009ddf2432c0447b18e2510b22dd67e, built against SDK 543ba67439b172783804b965bc3dafa2f3c46261 (SDK v0.2.4).
Full qualification: https://github.com/packdb-oss/packdb-cli/actions/runs/39532913671 (attempt 1). The downloaded source archive matches this Git tree byte for byte; package/dependency inventories, checksums and provenance were verified. The LICENSE in the source archive and in both binary archives was checked against the Apache License 2.0 text.
Both native targets passed extracted-artifact contract checks and the Linux glibc-floor assertion. THIRD_PARTY_NOTICES.txt is embedded in each binary archive. The downloaded macOS archive was also exercised after verification.
GitHub attaches package inventories by filename. Put the package inventory files in package-inventories/ before checking the original SHA256SUMS.
Each binary archive also has its own .sha256 file.
packdb-cli 0.2.3
Superseded by v0.2.4. This release's LICENSE files, including the copy in each binary archive, are an altered Apache License 2.0 text (the Trademarks clause, section 6, is missing; later sections are renumbered and reworded), and its lockfile has
rustls-webpki0.103.15 andwebpki-root-certs1.0.9 (RUSTSEC-2026-0382, RUSTSEC-2026-0383). v0.2.4 ships the verbatim license text and the patched versions; the CLI's Apache-2.0 licensing is unchanged. This release's tag, assets and checksums are kept unchanged.
PackDB query CLI 0.2.3
- Build against SDK 0.2.3 and Rustls 0.23.46. Query flags, output and exit codes are unchanged.
- Include THIRD_PARTY_NOTICES.txt with dependency license texts and original copyright/NOTICE files in each binary archive.
- Document single-maintainer public operation and repair candidate runner compatibility.
This release supersedes CLI 0.2.0–0.2.2, whose binaries contain Rustls 0.23.45. Prefer 0.2.3 for new installations. Old tags and asset bytes are preserved for provenance.
Linux x86_64 GNU and macOS arm64 binaries are built and tested natively with flight-sql. Linux retains the declared glibc 2.35 floor. macOS binaries are not notarized. Packages remain unpublished to crates.io.
Qualified source: 49ac2bf60cd50a813819a7488962a4075a033f3b.
Full qualification: https://github.com/packdb-oss/packdb-cli/actions/runs/39342989541 (attempt 1). The downloaded source archive matches this Git tree byte for byte; package/dependency inventories, checksums and provenance were verified.
Both native targets passed extracted-artifact contract checks and the Linux glibc-floor assertion. THIRD_PARTY_NOTICES.txt is embedded in each binary archive. The downloaded macOS archive was also exercised after verification.
GitHub attaches package inventories by filename. Put the package inventory files in package-inventories/ before checking the original SHA256SUMS.
Each binary archive also has its own .sha256 file.
packdb-cli 0.2.2
Superseded by v0.2.4. This release's LICENSE files, including the copy in each binary archive, are an altered Apache License 2.0 text (the Trademarks clause, section 6, is missing; later sections are renumbered and reworded), and its lockfile has
rustls-webpki0.103.15 andwebpki-root-certs1.0.9 (RUSTSEC-2026-0382, RUSTSEC-2026-0383). v0.2.4 ships the verbatim license text and the patched versions; the CLI's Apache-2.0 licensing is unchanged. This release's tag, assets and checksums are kept unchanged.
Built against packdb-client 0.2.2. The CLI's flags, output and exit codes are unchanged. See CHANGELOG.md.
- Replaces the yanked
yoke-derive 0.8.3lockfile entry with0.8.4. - Adds Dependabot and a scheduled action-pin check, requires the Apache 2.0 notice in every source file, and records this repository as the canonical source of the CLI.
Not published to crates.io.
Source: 150d9c413ad00ac578f7e95f64c841e6a6684862 (#10). Built against SDK cfdebdcaa584e8c3eb75d9b7c873a843a9d5f912 (packdb-sdk v0.2.2, tree 4c5cfa8f577ac2d771e91f60365cff579981112a).
Binaries
Both are built natively, with no cross-compilation, with flight-sql enabled:
| target | runner | archive SHA-256 |
|---|---|---|
x86_64-unknown-linux-gnu |
ubuntu-22.04 |
dee8f36a507e976785a9bcf1248db99249a3a3c631b9c87c0121f1be0632468c |
aarch64-apple-darwin |
macos-15 |
ef9eb76d6eec1e9fa8c3705d0a1d5108e7630d3d5b9fdcfe0436c88814d9c376 |
- Linux: requires glibc 2.35 or newer. This declared floor is checked against the shipped binary's
GLIBC_*symbols; the highest symbol it needs isGLIBC_2.34. - macOS: the binary is not notarized. macOS blocks browser-downloaded copies by default.
Each archive contains the binary, LICENSE, COMPATIBILITY.md, DEPENDENCIES.txt and PROVENANCE.txt.
Provenance
All assets come from candidate run 36924931433 (attempt 1). That run passed the full checks, coverage, compatibility and security gates on this commit. It also checked the shipped contract against both extracted binaries: help, version, both transport flags and every documented exit code. The source archive is byte-identical to the tagged tree.
| asset | SHA-256 |
|---|---|
packdb-cli-0.2.2-source.tar.gz |
c0baa2e72b907a711374bea5c3bfc875a45187575399b530de055f727a975754 |
release-record.json |
0ed10059052dbdef8be97348a001ffa3f5e42b832c1089c92160fba09215002f |
SHA256SUMS |
d7a0c5e8f3cef19688db6c40bec3c8d6e4ced3bf2605e376a8778dccd1616372 |
SHA256SUMS lists the package inventory under package-inventories/. It is attached here by file name; put it in that directory before running shasum -a 256 -c SHA256SUMS.
Third-party attribution supplement (2026-10-19)
The original binary archives and their checksums are unchanged. Download the matching packdb-query-VERSION-TARGET-THIRD_PARTY_NOTICES.txt alongside each binary archive. These companion files contain license texts and original copyright/NOTICE files generated from this release's exact locked CLI/SDK sources for each target. Verify them with THIRD_PARTY_NOTICES-SHA256SUMS; the original SHA256SUMS continues to describe the original assets. Future patched binary archives include these notices inside the archive.
Superseded by 0.2.3
Use 0.2.3 for new installations. This older release records Rustls 0.23.45, affected by RUSTSEC-2026-0346 through RUSTSEC-2026-0349. The original tags, source and binary bytes are retained for provenance; their passing historical qualification does not establish that they are free of later-discovered vulnerabilities.
packdb-cli 0.2.1
Superseded by v0.2.4. This release's LICENSE files, including the copy in each binary archive, are an altered Apache License 2.0 text (the Trademarks clause, section 6, is missing; later sections are renumbered and reworded), and its lockfile has
rustls-webpki0.103.15 andwebpki-root-certs1.0.9 (RUSTSEC-2026-0382, RUSTSEC-2026-0383). v0.2.4 ships the verbatim license text and the patched versions; the CLI's Apache-2.0 licensing is unchanged. This release's tag, assets and checksums are kept unchanged.
Invalid SQL now exits 1 (SQL error), as crates/packdb-query-cli/COMPATIBILITY.md documents; 0.2.0 exited 3. See CHANGELOG.md.
- Rejected credentials (
401/403) exit2. - Every other non-2xx server response still exits
3. - A query rejected over HTTP after the Flight SQL to HTTP fallback is also
1.
Not published to crates.io.
Source: 1449d9bb7a0ccc84d51d8e0e5b73e19bfcde9491. Built against SDK 30ed6e97765f6cdfe468a9f9d862d139ba6b558f (packdb-sdk v0.2.1).
Binaries
Both are built natively, with no cross-compilation, with flight-sql enabled:
| target | runner | archive SHA-256 |
|---|---|---|
x86_64-unknown-linux-gnu |
ubuntu-22.04 |
ce28a80cc1428452ade3aea143f530d11cd46258d5e2f6b5ab6997124af2e577 |
aarch64-apple-darwin |
macos-15 |
1a90a0352e78b8bfcc79b8dd2d7a82996439ec61bfe8c9795c8e056069056fd0 |
- Linux: requires glibc 2.35 or newer. This declared floor is checked against the shipped binary's
GLIBC_*symbols; the highest symbol it needs isGLIBC_2.34. - macOS: the binary is not notarized. macOS blocks browser-downloaded copies by default.
Each archive contains the binary, LICENSE, COMPATIBILITY.md, DEPENDENCIES.txt and PROVENANCE.txt.
Provenance
All assets come from candidate run 36478647955 (attempt 1). That run passed the full checks, coverage, compatibility and security gates on this commit. It also checked the shipped contract against both extracted binaries: help, version, both transport flags and every documented exit code. The source archive is byte-identical to the tagged tree.
| asset | SHA-256 |
|---|---|
packdb-cli-0.2.1-source.tar.gz |
75c22e51cde3657bf11e1e115e41f6217b426d5c74d4eec38495815af77524c4 |
release-record.json |
2bb3a5542a51eeb2d1103b266c9998fe719b7595bd142a61b3dc1f2f4955f23c |
SHA256SUMS |
58b64cd1f0a9b312f3bf90c36ff8a145d45d46f715c507ff1583676db0487774 |
SHA256SUMS lists the package inventory under package-inventories/. It is attached here by file name; put it in that directory before running shasum -a 256 -c SHA256SUMS.
Third-party attribution supplement (2026-10-19)
The original binary archives and their checksums are unchanged. Download the matching packdb-query-VERSION-TARGET-THIRD_PARTY_NOTICES.txt alongside each binary archive. These companion files contain license texts and original copyright/NOTICE files generated from this release's exact locked CLI/SDK sources for each target. Verify them with THIRD_PARTY_NOTICES-SHA256SUMS; the original SHA256SUMS continues to describe the original assets. Future patched binary archives include these notices inside the archive.
Superseded by 0.2.3
Use 0.2.3 for new installations. This older release records Rustls 0.23.45, affected by RUSTSEC-2026-0346 through RUSTSEC-2026-0349. The original tags, source and binary bytes are retained for provenance; their passing historical qualification does not establish that they are free of later-discovered vulnerabilities.
packdb-cli 0.2.0
Superseded by v0.2.4. This release's LICENSE files, including the copy in each binary archive, are an altered Apache License 2.0 text (the Trademarks clause, section 6, is missing; later sections are renumbered and reworded), and its lockfile has
rustls-webpki0.103.15 andwebpki-root-certs1.0.9 (RUSTSEC-2026-0382, RUSTSEC-2026-0383). v0.2.4 ships the verbatim license text and the patched versions; the CLI's Apache-2.0 licensing is unchanged. This release's tag, assets and checksums are kept unchanged.
First release of packdb-query, the PackDB query CLI, as a standalone Apache-2.0 workspace. See CHANGELOG.md and crates/packdb-query-cli/COMPATIBILITY.md, the supported CLI contract.
Not published to crates.io.
Source: b52f6c9a9efc982649b388e5c6811fb5a6307e42. Built against SDK 295931915ad66be8a3cfbbb7360f4e76f34c7be8 (packdb-sdk v0.2.0).
Binaries
Both are built natively, with no cross-compilation, with flight-sql enabled:
| target | runner | archive SHA-256 |
|---|---|---|
x86_64-unknown-linux-gnu |
ubuntu-22.04 |
e7de7ed8634c5b2a08b2ac2ebbdc8d9f75dfd1c7d12b17d0e3dd50353635cd5a |
aarch64-apple-darwin |
macos-15 |
34770a687ceb409484983a60e22f8e9abbdec9d0cc3b9bd70f2512ba0c0ac71c |
- Linux: requires glibc 2.35 or newer. This declared floor is checked against the shipped binary's
GLIBC_*symbols; the highest symbol it needs isGLIBC_2.34. - macOS: the binary is not notarized. macOS blocks browser-downloaded copies by default.
Each archive contains the binary, LICENSE, COMPATIBILITY.md, DEPENDENCIES.txt and PROVENANCE.txt.
Provenance
All assets come from candidate run 36215678692 (attempt 1). That run passed the full checks, coverage, compatibility and security gates on this commit. It also checked the shipped contract against both extracted binaries: help, version, both transport flags and every documented exit code. The source archive is byte-identical to the tagged tree.
| asset | SHA-256 |
|---|---|
packdb-cli-0.2.0-source.tar.gz |
363f0626a8dc45e8802943132ce6de6e52012dd86ec10efbff0eb6efab4198d6 |
release-record.json |
2e0f7eb3da971de15646ec0384da2be1db2e87af1d496685f5ffb20a8b043729 |
SHA256SUMS |
dae545744403d36e7a45ef4833eb1016d61cb67c5d949396fda71a92124e521f |
SHA256SUMS lists the package inventories under package-inventories/. They are attached here by file name; put them in that directory before running shasum -a 256 -c SHA256SUMS.
Third-party attribution supplement (2026-10-19)
The original binary archives and their checksums are unchanged. Download the matching packdb-query-VERSION-TARGET-THIRD_PARTY_NOTICES.txt alongside each binary archive. These companion files contain license texts and original copyright/NOTICE files generated from this release's exact locked CLI/SDK sources for each target. Verify them with THIRD_PARTY_NOTICES-SHA256SUMS; the original SHA256SUMS continues to describe the original assets. Future patched binary archives include these notices inside the archive.
Superseded by 0.2.3
Use 0.2.3 for new installations. This older release records Rustls 0.23.45, affected by RUSTSEC-2026-0346 through RUSTSEC-2026-0349. The original tags, source and binary bytes are retained for provenance; their passing historical qualification does not establish that they are free of later-discovered vulnerabilities.