diff --git a/.github/workflows/node.yaml b/.github/workflows/node.yaml
index 2a49a7a..4c296ce 100644
--- a/.github/workflows/node.yaml
+++ b/.github/workflows/node.yaml
@@ -103,10 +103,14 @@ jobs:
           image: ${{ matrix.settings.docker }}
           options: --user 0:0 -v ${{ github.workspace }}:/build -w /build/node
           run: |
-            apk add --no-cache curl || true
+            apk add --no-cache curl libstdc++ xz
+            curl -fsSL https://unofficial-builds.nodejs.org/download/release/v22.14.0/node-v22.14.0-linux-x64-musl.tar.xz \
+              | tar -xJ --strip-components=1 -C /usr/local
             curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs | sh -s -- -y --default-toolchain stable
             export PATH="$HOME/.cargo/bin:$PATH"
             rustc --version
+            node --version
+            npm ci
             npx napi build --platform --release --target ${{ matrix.settings.target }}
 
       - uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
diff --git a/Cargo.lock b/Cargo.lock
index 53e1082..fdabfca 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -1379,7 +1379,7 @@ dependencies = [
 
 [[package]]
 name = "murk-cli"
-version = "0.5.4"
+version = "0.5.5"
 dependencies = [
  "age",
  "assert_cmd",
@@ -1409,7 +1409,7 @@ dependencies = [
 
 [[package]]
 name = "murk-napi"
-version = "0.5.4"
+version = "0.5.5"
 dependencies = [
  "murk-cli",
  "napi",
diff --git a/Cargo.toml b/Cargo.toml
index 1523e0b..9d8a1c4 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -4,7 +4,7 @@ exclude = ["fuzz"]
 
 [package]
 name = "murk-cli"
-version = "0.5.4"
+version = "0.5.5"
 edition = "2024"
 rust-version = "1.89"
 description = "Encrypted secrets manager for developers — one file, age encryption, git-friendly"
diff --git a/node/Cargo.toml b/node/Cargo.toml
index 25afbb0..db2036c 100644
--- a/node/Cargo.toml
+++ b/node/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "murk-napi"
-version = "0.5.4"
+version = "0.5.5"
 edition = "2024"
 license = "MIT OR Apache-2.0"
 publish = false
diff --git a/node/package-lock.json b/node/package-lock.json
index 460658c..2ccf029 100644
--- a/node/package-lock.json
+++ b/node/package-lock.json
@@ -1,12 +1,12 @@
 {
   "name": "@iicky/murk-secrets",
-  "version": "0.5.4",
+  "version": "0.5.5",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@iicky/murk-secrets",
-      "version": "0.5.4",
+      "version": "0.5.5",
       "license": "MIT OR Apache-2.0",
       "devDependencies": {
         "@biomejs/biome": "^2.4.9",
diff --git a/node/package.json b/node/package.json
index 5aa86ea..0cf0a71 100644
--- a/node/package.json
+++ b/node/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@iicky/murk-secrets",
-  "version": "0.5.4",
+  "version": "0.5.5",
   "description": "Node.js/TypeScript bindings for murk — encrypted secrets manager",
   "main": "index.js",
   "types": "index.d.ts",