SDK v0.3.0

SDK 0.3.0

Packages: packdb-client 0.3.0 and packdb-otel 0.3.0. This release changes the public API; see COMPATIBILITY.md ("Errors and transports in 0.3.0") for migration.

Breaking changes:

• ClientError is #[non_exhaustive] and distinguishes Unauthenticated (HTTP 401, gRPC Unauthenticated) and PermissionDenied (HTTP 403, gRPC PermissionDenied), which were ConnectionError. (#34)
• SqlClientConfig::http_only is replaced by transport: SqlTransport (Auto, Http, FlightSql). An explicit transport never falls back. Auto falls back to HTTP only when the Flight SQL connection could not be opened before any request was sent, not after a failure part-way through a query. (#34)
• New ClientError::QueryError (a 400, or a trace search's 422) and ClientError::NotFound (a trace the server reports it has no part of). (#36)
• packdb-otel and the flight-sql feature of packdb-client no longer enable tonic's zstd feature; gzip remains. An application that needs zstd gRPC compression enables tonic's zstd feature itself. (#37)

Additions:

• QueryApiClient for the PromQL, LogQL and TraceQL HTTP APIs, with no feature required. (#36)
• SqlClient::execute_query_rows_with_transport, returning RowsAnswer with the transport that answered and any fallback reason, or a QueryFailure. (#34)
• OutputFormat::render for rows already in hand.

Deprecated: ClientError::exit_code.

Fixes:

• Table and CSV output no longer change values: each cell is the decoded value, so integers above 2^53 keep every digit, 1 prints as 1, and a column that started null or changed type keeps its values. JSON output is unchanged. (#42)
• tokio 1.53.3 for RUSTSEC-2026-0386. (#35)

Packages retain publish = false. This source release does not publish crates to crates.io.

Qualified source: 2fa68dd3ac773bbcfc1d0ef074bc10a19cca97a9.

Full qualification: https://github.com/packdb-oss/packdb-sdk/actions/runs/40799650458 (attempt 1). The downloaded source archive matches this Git tree byte for byte, its three LICENSE files are the Apache License 2.0 text released in 0.2.4, and package/dependency inventories and checksums were verified.

GitHub attaches package inventories by filename. Put the package inventory files in package-inventories/ before checking the original SHA256SUMS.

SDK v0.2.4

SDK 0.2.4

Packages: packdb-client 0.2.4 and packdb-otel 0.2.4. No public API or wire-format changes since 0.2.3.

• Replace the LICENSE files (repository root, packdb-client and packdb-otel) with the verbatim Apache License 2.0 text. SDK 0.2.0–0.2.3 shipped an altered text: the Trademarks clause (section 6) was missing, sections 7 to 9 were renumbered 6 to 8, the copyright grant wording differed, and section 9 was retitled. The packages' licensing (Apache-2.0, as declared in Cargo.toml and the source headers) is unchanged.
• Use rustls-webpki 0.103.16 and webpki-root-certs 1.0.10, addressing RUSTSEC-2026-0382 and RUSTSEC-2026-0383.

This release supersedes SDK 0.2.0–0.2.3. Their tags, assets and checksums are kept unchanged.

Downstream applications keep their own Cargo.lock. Update rustls-webpki to at least 0.103.16 and webpki-root-certs to at least 1.0.10 (for example cargo update -p rustls-webpki -p webpki-root-certs) and audit that application lockfile; the SDK repository lockfile does not replace a consumer lockfile.

Packages retain publish = false. This source release does not publish crates to crates.io.

Qualified source: 543ba67439b172783804b965bc3dafa2f3c46261.

Full qualification: https://github.com/packdb-oss/packdb-sdk/actions/runs/39524815461 (attempt 1). The downloaded source archive matches this Git tree byte for byte, and its three LICENSE files were checked against the Apache License 2.0 text; package/dependency inventories, checksums and provenance were verified.

GitHub attaches package inventories by filename. Put the package inventory files in package-inventories/ before checking the original SHA256SUMS.

SDK v0.2.3

Superseded by v0.2.4. This release's LICENSE files are an altered Apache License 2.0 text (the Trademarks clause, section 6, is missing; later sections are renumbered and reworded), and its lockfile has rustls-webpki 0.103.15 and webpki-root-certs 1.0.9 (RUSTSEC-2026-0382, RUSTSEC-2026-0383). v0.2.4 ships the verbatim license text and the patched versions; the packages' Apache-2.0 licensing is unchanged. This release's tag, assets and checksums are kept unchanged.

SDK 0.2.3

Packages: packdb-client 0.2.3 and packdb-otel 0.2.3.

• Redact API keys, bearer tokens and basic-auth credentials from diagnostic Debug output, including nested credential providers. Authentication headers and precedence are unchanged.
• Use Rustls 0.23.46, addressing RUSTSEC-2026-0346, RUSTSEC-2026-0347, RUSTSEC-2026-0348 and RUSTSEC-2026-0349.
• Document single-maintainer public operation and repair candidate runner compatibility.

This release supersedes SDK 0.2.0–0.2.2, whose committed lockfiles contain Rustls 0.23.45 and whose credential types can expose secrets if explicitly logged with Debug. No actual credential exposure was found in the reviewed repository history or Actions logs.

Downstream applications keep their own Cargo.lock. Update Rustls to at least 0.23.46 and audit that application lockfile; the SDK repository lockfile does not replace a consumer lockfile.

Packages retain publish = false. This source release does not publish crates to crates.io.

Qualified source: 9a720a7347b5a6d6bfcab685ed90024efdb8d3ba.

Full qualification: https://github.com/packdb-oss/packdb-sdk/actions/runs/39336855064 (attempt 1). The downloaded source archive matches this Git tree byte for byte; package/dependency inventories, checksums and provenance were verified.

GitHub attaches package inventories by filename. Put the package inventory files in package-inventories/ before checking the original SHA256SUMS.

SDK v0.2.2

Superseded by v0.2.4. This release's LICENSE files are an altered Apache License 2.0 text (the Trademarks clause, section 6, is missing; later sections are renumbered and reworded), and its lockfile has rustls-webpki 0.103.15 and webpki-root-certs 1.0.9 (RUSTSEC-2026-0382, RUSTSEC-2026-0383). v0.2.4 ships the verbatim license text and the patched versions; the packages' Apache-2.0 licensing is unchanged. This release's tag, assets and checksums are kept unchanged.

SDK 0.2.2

Packages: packdb-client 0.2.2 and packdb-otel 0.2.2.

• Add QueryResponse and SqlClient::execute_query_rows_with_completeness to retain x-packdb-partial-causes from HTTP headers and Flight SQL DoGet initial metadata. Empty and unreadable carriers fail closed. HTTP fallback retains only the answering response's causes. Existing row-only methods remain unchanged (#14).
• Replace the yanked yoke-derive 0.8.3 lockfile entry with 0.8.4.
• Update pinned CI actions, add Dependabot and scheduled action-pin checks, and record this repository as the canonical SDK source (#12, #13).
• Update package versions, changelog, and compatibility documentation for 0.2.2 (#18).

Qualified source: cfdebdc.

Full checks, coverage, compatibility, and security passed in https://github.com/packdb-oss/packdb-sdk/actions/runs/36893405039 (attempt 1). The source archive, package and dependency inventories, checksums, and release record were verified against that commit. Both packages include README and LICENSE and exclude internal-only files.

The release assets are the reviewed candidate source archive, source inventory, dependency inventory, per-package inventories, SHA256SUMS, and release-record.json. Packages retain publish = false; this source release does not publish packages to crates.io.

Depend on this source release by tag:

packdb-client = { git = "https://github.com/packdb-oss/packdb-sdk", tag = "v0.2.2", features = ["sql"] }
packdb-otel = { git = "https://github.com/packdb-oss/packdb-sdk", tag = "v0.2.2" }

Asset	SHA-256
packdb-sdk-0.2.2-source.tar.gz	a86c94c0ffdcfaff012ddff521a71944b9a3c44e1cfddafc11d0496f8d9fd2bb
release-record.json	65d31e8b3c8908a6e6b0ed00fdb083837cdf7ba36c4f0adb64406279d9c85164
SHA256SUMS	40b1393f18486548b14eec1d730175acec7d39170a00805936805f8a091b7cf3

SHA256SUMS lists the package inventories under package-inventories/. GitHub attaches them by file name. After downloading all release assets into one directory, put the two package inventories into that subdirectory before verifying:

mkdir -p package-inventories
mv packdb-client.txt packdb-otel.txt package-inventories/
shasum -a 256 -c SHA256SUMS

Superseded by 0.2.3

Use 0.2.3 for new installations. This older release records Rustls 0.23.45, affected by RUSTSEC-2026-0346 through RUSTSEC-2026-0349. The original tags, source and binary bytes are retained for provenance; their passing historical qualification does not establish that they are free of later-discovered vulnerabilities.

packdb-sdk 0.2.1

Superseded by v0.2.4. This release's LICENSE files are an altered Apache License 2.0 text (the Trademarks clause, section 6, is missing; later sections are renumbered and reworded), and its lockfile has rustls-webpki 0.103.15 and webpki-root-certs 1.0.9 (RUSTSEC-2026-0382, RUSTSEC-2026-0383). v0.2.4 ships the verbatim license text and the patched versions; the packages' Apache-2.0 licensing is unchanged. This release's tag, assets and checksums are kept unchanged.

packdb-client now classifies a query the server rejects by the documented exit-code taxonomy. See CHANGELOG.md.

• A 400 whose body is the server's query or parse rejection (Query error: / Parse error:) is ClientError::SqlError.
• 401/403 are ClientError::ConnectionError.
• Every other non-2xx response, including every 5xx, remains ClientError::ProtocolError. 0.2.0 reported all of them as ProtocolError.

packdb-client and packdb-otel move to 0.2.1. The lockfile also takes 20 incidental third-party patch and minor updates from a fresh, reviewed resolution.

Not published to crates.io. Depend on it by tag:

packdb-client = { git = "https://github.com/packdb-oss/packdb-sdk", tag = "v0.2.1" }
packdb-otel = { git = "https://github.com/packdb-oss/packdb-sdk", tag = "v0.2.1" }

Source: 30ed6e97765f6cdfe468a9f9d862d139ba6b558f.

The assets come from candidate run 36473876017 (attempt 1), which passed the full checks, coverage, compatibility and security gates on this commit. The source archive is byte-identical to the tagged tree.

asset	SHA-256
packdb-sdk-0.2.1-source.tar.gz	e008afc7c54233e61e5383c83fa1500a741544a5f43646d548e33d67368b10df
release-record.json	a78fa32f3d1755a277b486444d678ba9e3c891eeb9a13e779358518128f981d4
SHA256SUMS	dbe5b40b5d8c26ced70a563bbae4b67b32c6bd81cde7125cc502a9185ad1f8f9

SHA256SUMS lists the package inventories under package-inventories/. They are attached here by file name; put them in that directory before running shasum -a 256 -c SHA256SUMS.

Superseded by 0.2.3

Use 0.2.3 for new installations. This older release records Rustls 0.23.45, affected by RUSTSEC-2026-0346 through RUSTSEC-2026-0349. The original tags, source and binary bytes are retained for provenance; their passing historical qualification does not establish that they are free of later-discovered vulnerabilities.

packdb-sdk 0.2.0

Superseded by v0.2.4. This release's LICENSE files are an altered Apache License 2.0 text (the Trademarks clause, section 6, is missing; later sections are renumbered and reworded), and its lockfile has rustls-webpki 0.103.15 and webpki-root-certs 1.0.9 (RUSTSEC-2026-0382, RUSTSEC-2026-0383). v0.2.4 ships the verbatim license text and the patched versions; the packages' Apache-2.0 licensing is unchanged. This release's tag, assets and checksums are kept unchanged.

First release of packdb-otel and packdb-client as a standalone Apache-2.0 workspace. See CHANGELOG.md and COMPATIBILITY.md.

Not published to crates.io. Depend on it by tag:

packdb-client = { git = "https://github.com/packdb-oss/packdb-sdk", tag = "v0.2.0" }
packdb-otel = { git = "https://github.com/packdb-oss/packdb-sdk", tag = "v0.2.0" }

Source: 295931915ad66be8a3cfbbb7360f4e76f34c7be8.

The assets are the source archive, source inventory, dependency list, SHA-256 checksums and release record from candidate run 36214017758 (attempt 1). That run passed the full checks, coverage, compatibility and security gates on this commit. The source archive is byte-identical to the tagged tree.

asset	SHA-256
packdb-sdk-0.2.0-source.tar.gz	8821a20c63979390f024bb3b0b6485c6bd45878473b8d57fdd863a5c9043f149
release-record.json	7980a466c01eafef0436345bc8525ac04b9e9ea4d026c6e7dac9bf09bc67b52f
SHA256SUMS	2b14daab7ecf0150637e4e1d67721f5247b77ad91d912b0930ab1ff3285b4057

SHA256SUMS lists the package inventories under package-inventories/. They are attached here by file name; put them in that directory before running shasum -a 256 -c SHA256SUMS.

Superseded by 0.2.3

Use 0.2.3 for new installations. This older release records Rustls 0.23.45, affected by RUSTSEC-2026-0346 through RUSTSEC-2026-0349. The original tags, source and binary bytes are retained for provenance; their passing historical qualification does not establish that they are free of later-discovered vulnerabilities.