Skip to content

packdb-cli 0.2.0

Choose a tag to compare

View all tags
@aaraujo aaraujo released this 27 Sep 23:13
· 33 commits to main since this release
v0.2.0
b52f6c9
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Superseded by v0.2.4. This release's LICENSE files, including the copy in each binary archive, are an altered Apache License 2.0 text (the Trademarks clause, section 6, is missing; later sections are renumbered and reworded), and its lockfile has rustls-webpki 0.103.15 and webpki-root-certs 1.0.9 (RUSTSEC-2026-0382, RUSTSEC-2026-0383). v0.2.4 ships the verbatim license text and the patched versions; the CLI's Apache-2.0 licensing is unchanged. This release's tag, assets and checksums are kept unchanged.

First release of packdb-query, the PackDB query CLI, as a standalone Apache-2.0 workspace. See CHANGELOG.md and crates/packdb-query-cli/COMPATIBILITY.md, the supported CLI contract.

Not published to crates.io.

Source: b52f6c9a9efc982649b388e5c6811fb5a6307e42. Built against SDK 295931915ad66be8a3cfbbb7360f4e76f34c7be8 (packdb-sdk v0.2.0).

Binaries

Both are built natively, with no cross-compilation, with flight-sql enabled:

target runner archive SHA-256
x86_64-unknown-linux-gnu ubuntu-22.04 e7de7ed8634c5b2a08b2ac2ebbdc8d9f75dfd1c7d12b17d0e3dd50353635cd5a
aarch64-apple-darwin macos-15 34770a687ceb409484983a60e22f8e9abbdec9d0cc3b9bd70f2512ba0c0ac71c
  • Linux: requires glibc 2.35 or newer. This declared floor is checked against the shipped binary's GLIBC_* symbols; the highest symbol it needs is GLIBC_2.34.
  • macOS: the binary is not notarized. macOS blocks browser-downloaded copies by default.

Each archive contains the binary, LICENSE, COMPATIBILITY.md, DEPENDENCIES.txt and PROVENANCE.txt.

Provenance

All assets come from candidate run 36215678692 (attempt 1). That run passed the full checks, coverage, compatibility and security gates on this commit. It also checked the shipped contract against both extracted binaries: help, version, both transport flags and every documented exit code. The source archive is byte-identical to the tagged tree.

asset SHA-256
packdb-cli-0.2.0-source.tar.gz 363f0626a8dc45e8802943132ce6de6e52012dd86ec10efbff0eb6efab4198d6
release-record.json 2e0f7eb3da971de15646ec0384da2be1db2e87af1d496685f5ffb20a8b043729
SHA256SUMS dae545744403d36e7a45ef4833eb1016d61cb67c5d949396fda71a92124e521f

SHA256SUMS lists the package inventories under package-inventories/. They are attached here by file name; put them in that directory before running shasum -a 256 -c SHA256SUMS.

Third-party attribution supplement (2026-10-19)

The original binary archives and their checksums are unchanged. Download the matching packdb-query-VERSION-TARGET-THIRD_PARTY_NOTICES.txt alongside each binary archive. These companion files contain license texts and original copyright/NOTICE files generated from this release's exact locked CLI/SDK sources for each target. Verify them with THIRD_PARTY_NOTICES-SHA256SUMS; the original SHA256SUMS continues to describe the original assets. Future patched binary archives include these notices inside the archive.

Superseded by 0.2.3

Use 0.2.3 for new installations. This older release records Rustls 0.23.45, affected by RUSTSEC-2026-0346 through RUSTSEC-2026-0349. The original tags, source and binary bytes are retained for provenance; their passing historical qualification does not establish that they are free of later-discovered vulnerabilities.

Assets 15
Loading