From b022090e2d2a1b3f2fa6133f98040242ea3c8722 Mon Sep 17 00:00:00 2001
From: Durable Workflow <support@durable-workflow.com>
Date: Tue, 8 Sep 2026 01:49:47 +0000
Subject: [PATCH] Release Rust SDK 2.0.3 with runtime external payload recovery

---
 CHANGELOG.md                        | 10 ++++++++++
 Cargo.toml                          |  4 ++--
 scripts/ci/test-publish-rust-sdk.py |  2 +-
 3 files changed, 13 insertions(+), 3 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index d6e3c4b..afcaa02 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,5 +1,15 @@
 # Changelog
 
+## 2.0.3
+
+- Resolve Server-managed external payload references before decoding worker
+  tasks, history, query/update results, and client workflow results. Large
+  activity results can resume workflows without re-executing their activities.
+- Fetch only from the authenticated runtime with the original namespace and
+  credential role, verify size and SHA-256, and reject redirects or malformed
+  references. Keep downloads bounded by a configurable per-response byte limit
+  and leave application metadata untouched.
+
 ## 2.0.2
 
 - Retry retryable storage-admission refusals in worker registration, polling,
diff --git a/Cargo.toml b/Cargo.toml
index baab7c9..616526c 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "durable-workflow"
-version = "2.0.2"
+version = "2.0.3"
 edition = "2021"
 description = "Rust client and worker SDK for Durable Workflow Cloud and self-hosted Server"
 license = "MIT"
@@ -14,7 +14,7 @@ categories = ["api-bindings", "asynchronous"]
 include = ["/src/**", "/schema/**", "/examples/**", "/Cargo.toml", "/README.md", "/CHANGELOG.md", "/LICENSE"]
 
 [package.metadata.durable-workflow]
-product-train = "2.0.2"
+product-train = "2.0.3"
 compatibility-authority = "protocol-manifests"
 supported-server-versions = "2.0.0"
 qualified-server-version = "2.0.0"
diff --git a/scripts/ci/test-publish-rust-sdk.py b/scripts/ci/test-publish-rust-sdk.py
index e34695f..48e640a 100644
--- a/scripts/ci/test-publish-rust-sdk.py
+++ b/scripts/ci/test-publish-rust-sdk.py
@@ -18,7 +18,7 @@
 PUBLISH = ROOT / "scripts" / "ci" / "publish-rust-sdk.sh"
 RELEASE_WORKFLOW = ROOT / ".github" / "workflows" / "release.yml"
 RELEASE_TOOLING_INSTALLER = ROOT / "scripts" / "ci" / "install-release-tooling.sh"
-PACKAGE_VERSION = "2.0.2"
+PACKAGE_VERSION = "2.0.3"
 PRODUCT_TRAIN = PACKAGE_VERSION
 SERVER_VERSIONS = "2.0.0"
 QUALIFIED_SERVER_VERSION = "2.0.0"