0.2.4

RELEASE-MANIFEST.txt

@@ -1,6 +1,11 @@
-RustBox 0.2.3 release manifest
+RustBox 0.2.4 release manifest
 
-0.2.3 feature/configuration changes:
+0.2.4 feature/configuration changes:
+- fixes S3-compatible HTTP endpoints by carrying allow_http in the final object_store ClientOptions
+- keeps HTTPS-only behavior as the default; plain HTTP still requires storage.allow_http=true
+- adds a local HTTP S3 regression test for the request path
+- pins Rust 1.99.1 and uses rust:1.99.1-trixie / debian:trixie-slim with libssl3t64
+- moves PostgreSQL 17 Compose services to postgres:17-trixie
 - optional Sieve, diagnostics and About feature switches
 - API namespace has an explicit 404 fallback so disabled/unknown API routes cannot be served by the SPA fallback
 - opt-in security response headers (disabled by default)
@@ -66,14 +71,14 @@ Docker examples:
 - docker/compose-mysql-nfs-opensearch.yml (MySQL + real NFS volume + OpenSearch)
 
 Operations/docs:
-- README.md documents 0.2.3 storage/search configuration
+- README.md documents 0.2.4 storage/search configuration
 - docker/README.md documents Compose variants
 - docs/STORAGE_SEARCH_OPERATIONS.md documents failure modes, shared-storage requirements and migration behavior
 - TODO.md leaves live SILO/MinIO/AWS/Ceph and real multi-node acceptance validation explicitly pending
 
 Build/release metadata:
 - `scripts/package-release.sh` runs the full Rust release gate before creating ZIP/SHA256 artifacts
-- Cargo.toml version = 0.2.3
-- rust-toolchain.toml pins Rust 1.88.0
+- Cargo.toml version = 0.2.4
+- rust-toolchain.toml pins Rust 1.99.1
 - Cargo.lock is intentionally not shipped; the release gate regenerates it before locked checks
 - CI and scripts/build-release.sh generate Cargo.lock, then run locked tests/Clippy/release build