Skip to content

packdb-cli 0.2.1

Choose a tag to compare

View all tags
@aaraujo aaraujo released this 28 Sep 21:08
· 32 commits to main since this release
v0.2.1
1449d9b
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Superseded by v0.2.4. This release's LICENSE files, including the copy in each binary archive, are an altered Apache License 2.0 text (the Trademarks clause, section 6, is missing; later sections are renumbered and reworded), and its lockfile has rustls-webpki 0.103.15 and webpki-root-certs 1.0.9 (RUSTSEC-2026-0382, RUSTSEC-2026-0383). v0.2.4 ships the verbatim license text and the patched versions; the CLI's Apache-2.0 licensing is unchanged. This release's tag, assets and checksums are kept unchanged.

Invalid SQL now exits 1 (SQL error), as crates/packdb-query-cli/COMPATIBILITY.md documents; 0.2.0 exited 3. See CHANGELOG.md.

  • Rejected credentials (401/403) exit 2.
  • Every other non-2xx server response still exits 3.
  • A query rejected over HTTP after the Flight SQL to HTTP fallback is also 1.

Not published to crates.io.

Source: 1449d9bb7a0ccc84d51d8e0e5b73e19bfcde9491. Built against SDK 30ed6e97765f6cdfe468a9f9d862d139ba6b558f (packdb-sdk v0.2.1).

Binaries

Both are built natively, with no cross-compilation, with flight-sql enabled:

target runner archive SHA-256
x86_64-unknown-linux-gnu ubuntu-22.04 ce28a80cc1428452ade3aea143f530d11cd46258d5e2f6b5ab6997124af2e577
aarch64-apple-darwin macos-15 1a90a0352e78b8bfcc79b8dd2d7a82996439ec61bfe8c9795c8e056069056fd0
  • Linux: requires glibc 2.35 or newer. This declared floor is checked against the shipped binary's GLIBC_* symbols; the highest symbol it needs is GLIBC_2.34.
  • macOS: the binary is not notarized. macOS blocks browser-downloaded copies by default.

Each archive contains the binary, LICENSE, COMPATIBILITY.md, DEPENDENCIES.txt and PROVENANCE.txt.

Provenance

All assets come from candidate run 36478647955 (attempt 1). That run passed the full checks, coverage, compatibility and security gates on this commit. It also checked the shipped contract against both extracted binaries: help, version, both transport flags and every documented exit code. The source archive is byte-identical to the tagged tree.

asset SHA-256
packdb-cli-0.2.1-source.tar.gz 75c22e51cde3657bf11e1e115e41f6217b426d5c74d4eec38495815af77524c4
release-record.json 2bb3a5542a51eeb2d1103b266c9998fe719b7595bd142a61b3dc1f2f4955f23c
SHA256SUMS 58b64cd1f0a9b312f3bf90c36ff8a145d45d46f715c507ff1583676db0487774

SHA256SUMS lists the package inventory under package-inventories/. It is attached here by file name; put it in that directory before running shasum -a 256 -c SHA256SUMS.

Third-party attribution supplement (2026-10-19)

The original binary archives and their checksums are unchanged. Download the matching packdb-query-VERSION-TARGET-THIRD_PARTY_NOTICES.txt alongside each binary archive. These companion files contain license texts and original copyright/NOTICE files generated from this release's exact locked CLI/SDK sources for each target. Verify them with THIRD_PARTY_NOTICES-SHA256SUMS; the original SHA256SUMS continues to describe the original assets. Future patched binary archives include these notices inside the archive.

Superseded by 0.2.3

Use 0.2.3 for new installations. This older release records Rustls 0.23.45, affected by RUSTSEC-2026-0346 through RUSTSEC-2026-0349. The original tags, source and binary bytes are retained for provenance; their passing historical qualification does not establish that they are free of later-discovered vulnerabilities.

Assets 15
Loading