From 4f06d0cf31527ea9254c1a830f1c7bb647dd11f5 Mon Sep 17 00:00:00 2001
From: Mickey Scherrer <5324300+iicky@users.noreply.github.com>
Date: Sun, 5 Apr 2026 15:26:13 -0400
Subject: [PATCH 1/3] bump version to 0.5.5

---
 Cargo.lock             | 4 ++--
 Cargo.toml             | 2 +-
 node/Cargo.toml        | 2 +-
 node/package-lock.json | 4 ++--
 node/package.json      | 2 +-
 5 files changed, 7 insertions(+), 7 deletions(-)

diff --git a/Cargo.lock b/Cargo.lock
index 53e1082..fdabfca 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -1379,7 +1379,7 @@ dependencies = [
 
 [[package]]
 name = "murk-cli"
-version = "0.5.4"
+version = "0.5.5"
 dependencies = [
  "age",
  "assert_cmd",
@@ -1409,7 +1409,7 @@ dependencies = [
 
 [[package]]
 name = "murk-napi"
-version = "0.5.4"
+version = "0.5.5"
 dependencies = [
  "murk-cli",
  "napi",
diff --git a/Cargo.toml b/Cargo.toml
index 1523e0b..9d8a1c4 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -4,7 +4,7 @@ exclude = ["fuzz"]
 
 [package]
 name = "murk-cli"
-version = "0.5.4"
+version = "0.5.5"
 edition = "2024"
 rust-version = "1.89"
 description = "Encrypted secrets manager for developers — one file, age encryption, git-friendly"
diff --git a/node/Cargo.toml b/node/Cargo.toml
index 25afbb0..db2036c 100644
--- a/node/Cargo.toml
+++ b/node/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "murk-napi"
-version = "0.5.4"
+version = "0.5.5"
 edition = "2024"
 license = "MIT OR Apache-2.0"
 publish = false
diff --git a/node/package-lock.json b/node/package-lock.json
index 460658c..2ccf029 100644
--- a/node/package-lock.json
+++ b/node/package-lock.json
@@ -1,12 +1,12 @@
 {
   "name": "@iicky/murk-secrets",
-  "version": "0.5.4",
+  "version": "0.5.5",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@iicky/murk-secrets",
-      "version": "0.5.4",
+      "version": "0.5.5",
       "license": "MIT OR Apache-2.0",
       "devDependencies": {
         "@biomejs/biome": "^2.4.9",
diff --git a/node/package.json b/node/package.json
index 5aa86ea..0cf0a71 100644
--- a/node/package.json
+++ b/node/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@iicky/murk-secrets",
-  "version": "0.5.4",
+  "version": "0.5.5",
   "description": "Node.js/TypeScript bindings for murk — encrypted secrets manager",
   "main": "index.js",
   "types": "index.d.ts",

From 1ee2572f5ebce23a206036d9782fc343db188824 Mon Sep 17 00:00:00 2001
From: Mickey Scherrer <5324300+iicky@users.noreply.github.com>
Date: Sun, 5 Apr 2026 15:54:55 -0400
Subject: [PATCH 2/3] fix musl build: install Node 22 for napi-rs/cli v3
 compatibility

---
 .github/workflows/node.yaml | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/node.yaml b/.github/workflows/node.yaml
index 2a49a7a..5e1a7d3 100644
--- a/.github/workflows/node.yaml
+++ b/.github/workflows/node.yaml
@@ -103,10 +103,14 @@ jobs:
           image: ${{ matrix.settings.docker }}
           options: --user 0:0 -v ${{ github.workspace }}:/build -w /build/node
           run: |
-            apk add --no-cache curl || true
+            apk add --no-cache curl libstdc++
+            curl -fsSL https://unofficial-builds.nodejs.org/download/release/v22.14.0/node-v22.14.0-linux-x64-musl.tar.xz \
+              | tar -xJ --strip-components=1 -C /usr/local
             curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs | sh -s -- -y --default-toolchain stable
             export PATH="$HOME/.cargo/bin:$PATH"
             rustc --version
+            node --version
+            npm ci
             npx napi build --platform --release --target ${{ matrix.settings.target }}
 
       - uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0

From 2c106fb562543dc77a5b4ab10459e3b4ef65c696 Mon Sep 17 00:00:00 2001
From: Mickey Scherrer <5324300+iicky@users.noreply.github.com>
Date: Sun, 5 Apr 2026 16:05:17 -0400
Subject: [PATCH 3/3] fix musl build: install xz for node tarball extraction

---
 .github/workflows/node.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/node.yaml b/.github/workflows/node.yaml
index 5e1a7d3..4c296ce 100644
--- a/.github/workflows/node.yaml
+++ b/.github/workflows/node.yaml
@@ -103,7 +103,7 @@ jobs:
           image: ${{ matrix.settings.docker }}
           options: --user 0:0 -v ${{ github.workspace }}:/build -w /build/node
           run: |
-            apk add --no-cache curl libstdc++
+            apk add --no-cache curl libstdc++ xz
             curl -fsSL https://unofficial-builds.nodejs.org/download/release/v22.14.0/node-v22.14.0-linux-x64-musl.tar.xz \
               | tar -xJ --strip-components=1 -C /usr/local
             curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs | sh -s -- -y --default-toolchain stable