From 4b559e190e72dbd4875669bbf364da3a19f8ace0 Mon Sep 17 00:00:00 2001 From: Dan Draper Date: Mon, 1 Jun 2026 13:50:35 +1000 Subject: [PATCH 1/2] chore: prepare v2.2.2 release - Add CHANGELOG entry for the passthrough memory-leak fix (#400, closes via #395) - Backfill the missing [2.2.1] CHANGELOG section for the OPE index (shipped in v2.2.1 but left under [Unreleased]) - Bump workspace version 2.2.0-alpha.1 -> 2.2.2 (skipped for v2.2.1) - Make cipherstash-proxy inherit the workspace version to prevent future drift --- CHANGELOG.md | 8 ++++++++ Cargo.lock | 6 +++--- Cargo.toml | 2 +- packages/cipherstash-proxy/Cargo.toml | 2 +- 4 files changed, 13 insertions(+), 5 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index f157a815..89bdb6c0 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -6,6 +6,14 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/). ## [Unreleased] +## [2.2.2] - 2026-06-01 + +### Fixed + +- **Passthrough mode memory leak**: Fixed a per-statement memory leak that occurred in passthrough mode (empty encrypt config), where per-statement queues were not drained. Long-running connections could grow unbounded and eventually OOM. ([#400](https://github.com/cipherstash/proxy/issues/400)) + +## [2.2.1] - 2026-05-14 + ### Added - **OPE (Order-Preserving Encryption) index**: New `ope` index type alongside the existing `ore` for range and `ORDER BY` queries on encrypted columns. Drop-in alternative to `ore` — pick one per column. See the [encrypted indexes documentation](docs/how-to/index.md) for configuration. diff --git a/Cargo.lock b/Cargo.lock index c0ff097c..0c803032 100644 --- a/Cargo.lock +++ b/Cargo.lock @@ -835,7 +835,7 @@ dependencies = [ [[package]] name = "cipherstash-proxy" -version = "2.2.0-alpha.1" +version = "2.2.2" dependencies = [ "arc-swap", "async-trait", @@ -1527,7 +1527,7 @@ dependencies = [ [[package]] name = "eql-mapper-macros" -version = "2.2.0-alpha.1" +version = "2.2.2" dependencies = [ "pretty_assertions", "proc-macro2", @@ -4212,7 +4212,7 @@ checksum = "0fda2ff0d084019ba4d7c6f371c95d8fd75ce3524c3cb8fb653a3023f6323e64" [[package]] name = "showcase" -version = "2.2.0-alpha.1" +version = "2.2.2" dependencies = [ "rand 0.9.2", "rustls", diff --git a/Cargo.toml b/Cargo.toml index ee245b83..1553fb88 100644 --- a/Cargo.toml +++ b/Cargo.toml @@ -3,7 +3,7 @@ resolver = "2" members = ["packages/*"] [workspace.package] -version = "2.2.0-alpha.1" +version = "2.2.2" edition = "2021" [profile.dev] diff --git a/packages/cipherstash-proxy/Cargo.toml b/packages/cipherstash-proxy/Cargo.toml index 34abe065..790cea6f 100644 --- a/packages/cipherstash-proxy/Cargo.toml +++ b/packages/cipherstash-proxy/Cargo.toml @@ -1,6 +1,6 @@ [package] name = "cipherstash-proxy" -version = "2.2.0-alpha.1" +version.workspace = true edition = "2021" [dependencies] From 1ac1bcf20cf982c25df38ed68e32be3069ab724c Mon Sep 17 00:00:00 2001 From: Dan Draper Date: Mon, 1 Jun 2026 14:04:10 +1000 Subject: [PATCH 2/2] docs(changelog): add link refs for 2.2.1 and 2.2.2 --- CHANGELOG.md | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index 89bdb6c0..5982ab04 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -261,7 +261,9 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/). - Integration with CipherStash ZeroKMS. - Encrypt Query Language (EQL) for indexing and searching encrypted data. -[Unreleased]: https://github.com/cipherstash/proxy/compare/v2.2.0-alpha.1...HEAD +[Unreleased]: https://github.com/cipherstash/proxy/compare/v2.2.2...HEAD +[2.2.2]: https://github.com/cipherstash/proxy/compare/v2.2.1...v2.2.2 +[2.2.1]: https://github.com/cipherstash/proxy/compare/v2.2.0-alpha.1...v2.2.1 [2.2.0-alpha.1]: https://github.com/cipherstash/proxy/compare/v2.1.22...v2.2.0-alpha.1 [2.1.22]: https://github.com/cipherstash/proxy/releases/tag/v2.1.22 [2.1.21]: https://github.com/cipherstash/proxy/releases/tag/v2.1.21