[kinyoklion]

Requirements

• I have added test coverage for new or changed functionality
• I have followed the repository's pull request submission guidelines
• I have validated my changes against all supported platform versions

Related issues

• SDK-3296
• Fix: fix: Redact a global private attribute when one of its children is also private rust-server-sdk-evaluation#61
• Release: launchdarkly-server-sdk-evaluation 2.2.2

Describe the solution you've provided

Raises the launchdarkly-server-sdk-evaluation requirement from 2.2.1 to 2.2.2 so the minimum version includes the private-attribute redaction fix.

The bug: suppose the global private attributes contain both an attribute and one of its nested properties, such as /address and /address/street. If the child reference was processed first, the parent reference was dropped. Analytics events then included address with only street removed, and _meta.redactedAttributes listed only /address/street. Private attributes are stored in a HashSet, so whether this happened depended on iteration order. Sibling references (such as /address/city and /address/street) and per-context private attributes were not affected.

This SDK serializes event contexts through the evaluation crate's ContextAttributes, so the version bump is the whole fix. No public API changed between 2.2.1 and 2.2.2.

Describe alternatives you've considered

None.

Additional context

The regression test is in the evaluation crate (global_private_parent_is_redacted_when_a_child_is_also_private). 2.2.2 also raises that crate's MSRV to 1.97, which matches this SDK's current MSRV.

Local checks on Rust 1.97 (aarch64 Linux): cargo fmt --check, plus cargo test, cargo clippy -- -D warnings, and the contract-test service build for each of the seven CI feature sets. All pass. I did not run the contract test harness or the musl build locally.

As a one-off check that was not committed, I serialized 64 inline events through BaseEvent with global private attributes {/address, /address/street}. With 2.2.1, address leaked in 31 of 64. With 2.2.2, none leaked, and every event listed /address in redactedAttributes.

---

Note

Overview
Bumps launchdarkly-server-sdk-evaluation from 2.2.1 to 2.2.2 so event context serialization picks up a fix for global private-attribute redaction when both a parent path and a nested child are marked private (e.g. /address and /address/street).

Previously, iteration order over a HashSet could drop the parent reference and leak partial address data in analytics events with incomplete _meta.redactedAttributes. This SDK routes redacted contexts through the evaluation crate’s ContextAttributes (e.g. redacted_context_attributes on events), so the version bump is the full change—no local code or public API changes in this repo.

^{Reviewed by Cursor Bugbot for commit cdf5853. Bugbot is set up for automated code reviews on this repo. Configure here.}