chore: prepare v2.2.2 release

- Add CHANGELOG entry for the passthrough memory-leak fix (#400, closes via #395)
- Backfill the missing [2.2.1] CHANGELOG section for the OPE index (shipped in v2.2.1 but left under [Unreleased])
- Bump workspace version 2.2.0-alpha.1 -> 2.2.2 (skipped for v2.2.1)
- Make cipherstash-proxy inherit the workspace version to prevent future drift

Author: coderdan

CHANGELOG.md

@@ -6,6 +6,14 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/).
 
 ## [Unreleased]
 
+## [2.2.2] - 2026-06-01
+
+### Fixed
+
+- **Passthrough mode memory leak**: Fixed a per-statement memory leak that occurred in passthrough mode (empty encrypt config), where per-statement queues were not drained. Long-running connections could grow unbounded and eventually OOM. ([#400](https://github.com/cipherstash/proxy/issues/400))
+
+## [2.2.1] - 2026-05-14
+
 ### Added
 
 - **OPE (Order-Preserving Encryption) index**: New `ope` index type alongside the existing `ore` for range and `ORDER BY` queries on encrypted columns. Drop-in alternative to `ore` — pick one per column. See the [encrypted indexes documentation](docs/how-to/index.md) for configuration.

Cargo.lock

@@ -3,7 +3,7 @@ resolver = "2"
 members = ["packages/*"]
 
 [workspace.package]
-version = "2.2.0-alpha.1"
+version = "2.2.2"
 edition = "2021"
 
 [profile.dev]

Cargo.toml

@@ -1,6 +1,6 @@
 [package]
 name = "cipherstash-proxy"
-version = "2.2.0-alpha.1"
+version.workspace = true
 edition = "2021"
 
 [dependencies]