SDK v0.2.4

SDK 0.2.4

Packages: packdb-client 0.2.4 and packdb-otel 0.2.4. No public API or wire-format changes since 0.2.3.

• Replace the LICENSE files (repository root, packdb-client and packdb-otel) with the verbatim Apache License 2.0 text. SDK 0.2.0–0.2.3 shipped an altered text: the Trademarks clause (section 6) was missing, sections 7 to 9 were renumbered 6 to 8, the copyright grant wording differed, and section 9 was retitled. The packages' licensing (Apache-2.0, as declared in Cargo.toml and the source headers) is unchanged.
• Use rustls-webpki 0.103.16 and webpki-root-certs 1.0.10, addressing RUSTSEC-2026-0382 and RUSTSEC-2026-0383.

This release supersedes SDK 0.2.0–0.2.3. Their tags, assets and checksums are kept unchanged.

Downstream applications keep their own Cargo.lock. Update rustls-webpki to at least 0.103.16 and webpki-root-certs to at least 1.0.10 (for example cargo update -p rustls-webpki -p webpki-root-certs) and audit that application lockfile; the SDK repository lockfile does not replace a consumer lockfile.

Packages retain publish = false. This source release does not publish crates to crates.io.

Qualified source: 543ba67439b172783804b965bc3dafa2f3c46261.

Full qualification: https://github.com/packdb-oss/packdb-sdk/actions/runs/39524815461 (attempt 1). The downloaded source archive matches this Git tree byte for byte, and its three LICENSE files were checked against the Apache License 2.0 text; package/dependency inventories, checksums and provenance were verified.

GitHub attaches package inventories by filename. Put the package inventory files in package-inventories/ before checking the original SHA256SUMS.