chore: release

[release-pleaze]

🤖 New release

• s2-common: 0.30.0 -> 0.31.0 (⚠ API breaking changes)
• s2-api: 0.27.13 -> 0.27.14 (✓ API compatible changes)
• s2-lite: 0.29.27 -> 0.29.28 (✓ API compatible changes)
• s2-sdk: 0.26.0 -> 0.26.1 (✓ API compatible changes)
• s2-cli: 0.29.27 -> 0.29.28

⚠ s2-common breaking changes

--- failure constructible_struct_adds_field: externally-constructible struct adds field ---

Description:
A pub struct constructible with a struct literal has a new pub field. Existing struct literals must be updated to include the new field.
        ref: https://doc.rust-lang.org/reference/expressions/struct-expr.html
       impl: https://github.com/obi1kenobi/cargo-semver-checks/tree/v0.46.0/src/lints/constructible_struct_adds_field.ron

Failed in:
  field StreamReconfiguration.encryption in /tmp/.tmpeitQYz/s2/common/src/types/config.rs:151
  field OptionalStreamConfig.encryption in /tmp/.tmpeitQYz/s2/common/src/types/config.rs:305
  field StreamConfig.encryption in /tmp/.tmpeitQYz/s2/common/src/types/config.rs:126

--- failure enum_missing: pub enum removed or renamed ---

Description:
A publicly-visible enum cannot be imported by its prior path. A `pub use` may have been removed, or the enum itself may have been renamed or removed entirely.
        ref: https://doc.rust-lang.org/cargo/reference/semver.html#item-remove
       impl: https://github.com/obi1kenobi/cargo-semver-checks/tree/v0.46.0/src/lints/enum_missing.ron

Failed in:
  enum s2_common::record::PublicRecordError, previously in file /tmp/.tmptmFAeW/s2-common/src/record/mod.rs:58
  enum s2_common::record::InternalRecordError, previously in file /tmp/.tmptmFAeW/s2-common/src/record/mod.rs:49

--- failure enum_variant_added: enum variant added on exhaustive enum ---

Description:
A publicly-visible enum without #[non_exhaustive] has a new variant.
        ref: https://doc.rust-lang.org/cargo/reference/semver.html#enum-variant-new
       impl: https://github.com/obi1kenobi/cargo-semver-checks/tree/v0.46.0/src/lints/enum_variant_added.ron

Failed in:
  variant RecordType:EncryptedEnvelope in /tmp/.tmpeitQYz/s2/common/src/record/mod.rs:89

--- failure struct_missing: pub struct removed or renamed ---

Description:
A publicly-visible struct cannot be imported by its prior path. A `pub use` may have been removed, or the struct itself may have been renamed or removed entirely.
        ref: https://doc.rust-lang.org/cargo/reference/semver.html#item-remove
       impl: https://github.com/obi1kenobi/cargo-semver-checks/tree/v0.46.0/src/lints/struct_missing.ron

Failed in:
  struct s2_common::record::SequencedRecord, previously in file /tmp/.tmptmFAeW/s2-common/src/record/mod.rs:262

--- failure trait_requires_more_generic_type_params: trait now requires more generic type parameters ---

Description:
A trait now requires more generic type parameters than it used to. Uses of this trait that supplied the previously-required number of generic types will be broken. To fix this, consider supplying default values for newly-added generic types.
        ref: https://doc.rust-lang.org/cargo/reference/semver.html#trait-new-parameter-no-default
       impl: https://github.com/obi1kenobi/cargo-semver-checks/tree/v0.46.0/src/lints/trait_requires_more_generic_type_params.ron

Failed in:
  trait RecordBatcher (2 -> 3 required generic types) in /tmp/.tmpeitQYz/s2/common/src/record/batcher.rs:30

--- failure type_requires_more_generic_type_params: type now requires more generic type parameters ---

Description:
A type now requires more generic type parameters than it used to. Uses of this type that supplied the previously-required number of generic types will be broken. To fix this, consider supplying default values for newly-added generic types.
        ref: https://doc.rust-lang.org/cargo/reference/semver.html#trait-new-parameter-no-default
       impl: https://github.com/obi1kenobi/cargo-semver-checks/tree/v0.46.0/src/lints/type_requires_more_generic_type_params.ron

Failed in:
  Struct RecordBatcher (2 -> 3 required generic types) in /tmp/.tmpeitQYz/s2/common/src/record/batcher.rs:30

Changelog

s2-common

[0.31.0] - 2026-04-14

Features

• Add EnumString and IntoStaticStr derives to BasinScope (#344)
• Request-time data encryption (#349)
• Enforce allowed encryption modes via stream config (#376)

Bug Fixes

• Return error instead of panicking on truncated record bytes (#362)

Refactor

• Clarify encryption spec, mode, and format semantics (#375)

Testing

• Strengthen encrypted record test coverage (#372)
• Exercise encrypted append input coverage (#373)
• Simplify backend integration tests and tighten read coverage (#374)

s2-api

[0.27.14] - 2026-04-14

Features

• Request-time data encryption (#349)
• Enforce allowed encryption modes via stream config (#376)

Refactor

• Clarify encryption spec, mode, and format semantics (#375)
• Decouple JSON extraction rejection from axum (#348)

Miscellaneous Tasks

• Ignore basin state when deserializing BasinInfo (#350)

s2-lite

[0.29.28] - 2026-04-14

Features

• Request-time data encryption (#349)
• Enforce allowed encryption modes via stream config (#376)

Refactor

• Clarify encryption spec, mode, and format semantics (#375)
• Decouple JSON extraction rejection from axum (#348)

Testing

• Stabilize follow-mode timing coverage (#371)
• Simplify backend integration tests and tighten read coverage (#374)

Miscellaneous Tasks

• Update basin endpoint from b.aws.s2.dev to b.s2.dev (#346)

s2-sdk

[0.26.1] - 2026-04-14

Features

• Request-time data encryption (#349)
• Enforce allowed encryption modes via stream config (#376)

Bug Fixes

• Missing validation for empty buffer in S2S EOS case (#384)
• Incorrect tracking of limits after client-side filtering (#387)
• Last seen tail not updated when heartbeat batches are received (#388)

Refactor

• Clarify encryption spec, mode, and format semantics (#375)

Documentation

• Update examples for centralized SDK docs (#368)

Miscellaneous Tasks

• Update basin endpoint from b.aws.s2.dev to b.s2.dev (#346)

s2-cli

[0.29.28] - 2026-04-14

Features

• Request-time data encryption (#349)
• Enforce allowed encryption modes via stream config (#376)

Refactor

• Clarify encryption spec, mode, and format semantics (#375)

Testing

• Isolate CLI config tests and exclude live SDK tests (#366)

---

This PR was generated with release-plz.

[greptile-apps]

PR author is not in the allowed authors list.