SDK v0.2.2

Superseded by v0.2.4. This release's LICENSE files are an altered Apache License 2.0 text (the Trademarks clause, section 6, is missing; later sections are renumbered and reworded), and its lockfile has rustls-webpki 0.103.15 and webpki-root-certs 1.0.9 (RUSTSEC-2026-0382, RUSTSEC-2026-0383). v0.2.4 ships the verbatim license text and the patched versions; the packages' Apache-2.0 licensing is unchanged. This release's tag, assets and checksums are kept unchanged.

SDK 0.2.2

Packages: packdb-client 0.2.2 and packdb-otel 0.2.2.

• Add QueryResponse and SqlClient::execute_query_rows_with_completeness to retain x-packdb-partial-causes from HTTP headers and Flight SQL DoGet initial metadata. Empty and unreadable carriers fail closed. HTTP fallback retains only the answering response's causes. Existing row-only methods remain unchanged (#14).
• Replace the yanked yoke-derive 0.8.3 lockfile entry with 0.8.4.
• Update pinned CI actions, add Dependabot and scheduled action-pin checks, and record this repository as the canonical SDK source (#12, #13).
• Update package versions, changelog, and compatibility documentation for 0.2.2 (#18).

Qualified source: cfdebdc.

Full checks, coverage, compatibility, and security passed in https://github.com/packdb-oss/packdb-sdk/actions/runs/36893405039 (attempt 1). The source archive, package and dependency inventories, checksums, and release record were verified against that commit. Both packages include README and LICENSE and exclude internal-only files.

The release assets are the reviewed candidate source archive, source inventory, dependency inventory, per-package inventories, SHA256SUMS, and release-record.json. Packages retain publish = false; this source release does not publish packages to crates.io.

Depend on this source release by tag:

packdb-client = { git = "https://github.com/packdb-oss/packdb-sdk", tag = "v0.2.2", features = ["sql"] }
packdb-otel = { git = "https://github.com/packdb-oss/packdb-sdk", tag = "v0.2.2" }

Asset	SHA-256
packdb-sdk-0.2.2-source.tar.gz	a86c94c0ffdcfaff012ddff521a71944b9a3c44e1cfddafc11d0496f8d9fd2bb
release-record.json	65d31e8b3c8908a6e6b0ed00fdb083837cdf7ba36c4f0adb64406279d9c85164
SHA256SUMS	40b1393f18486548b14eec1d730175acec7d39170a00805936805f8a091b7cf3

SHA256SUMS lists the package inventories under package-inventories/. GitHub attaches them by file name. After downloading all release assets into one directory, put the two package inventories into that subdirectory before verifying:

mkdir -p package-inventories
mv packdb-client.txt packdb-otel.txt package-inventories/
shasum -a 256 -c SHA256SUMS

Superseded by 0.2.3

Use 0.2.3 for new installations. This older release records Rustls 0.23.45, affected by RUSTSEC-2026-0346 through RUSTSEC-2026-0349. The original tags, source and binary bytes are retained for provenance; their passing historical qualification does not establish that they are free of later-discovered vulnerabilities.