chore(deps): upgrade EQL and eql-bindings to 3.0.4

[freshtonic]

The 3.0.3 → 3.0.4 delta is inert: eql-bindings' src/ is byte-identical between the two releases, and the SQL differs only in doc-comment markup (@example → @code{.sql}) plus the two version strings eql_v3.version() and the schema COMMENT report.

Also drops the stale caveat on RewriteEqlGroupBy, which still claimed eql_v3.grouped_value needed a release later than the pinned one — it named 3.0.2 while mise.toml had moved to 3.0.3, and the function is present in the 3.0.4 SQL the pin now installs.

Acknowledgment

By submitting this pull request, I confirm that CipherStash can use, modify, copy, and redistribute this contribution, under the terms of CipherStash's choice.

Summary by CodeRabbit

• Updates
  • Updated the bundled EQL searchable-encryption release to version 3.0.4.
  • Updated setup and development configurations to use the same EQL version.
  • Improved compatibility for grouped search results using grouped_value.
• Documentation
  • Updated release notes and technical guidance to reflect the EQL 3.0.4 baseline.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro Plus

Run ID: fba028e9-49e1-4465-a398-015605a54220

📥 Commits

Reviewing files that changed from the base of the PR and between f1a90f8 and 7de0a79.

⛔ Files ignored due to path filters (1)

• Cargo.lock is excluded by !**/*.lock

📒 Files selected for processing (5)

• CHANGELOG.md
• Cargo.toml
• mise.local.example.toml
• mise.toml
• packages/eql-mapper/src/transformation_rules/rewrite_eql_group_by.rs

---

📝 Walkthrough

Walkthrough

The PR updates EQL references from 3.0.3 to 3.0.4 in the Cargo dependency, mise configuration, mapper documentation, and unreleased changelog.

Changes

EQL version alignment

Layer / File(s)	Summary
Update EQL version references Cargo.toml, mise.toml, mise.local.example.toml, packages/eql-mapper/..., CHANGELOG.md	The pinned dependency, configuration values, documentation comment, and changelog entry now reference EQL 3.0.4.

Estimated code review effort: 1 (Trivial) | ~3 minutes

Suggested reviewers: coderdan

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title accurately summarizes the main change: upgrading EQL and eql-bindings to 3.0.4.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

✨ Finishing Touches

📝 Generate docstrings

• Create stacked PR
• Commit on current branch

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch chore/eql-3.0.4

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}