From f8313a981d6640a52d0f6e8c1ae7d0dfae7e5d68 Mon Sep 17 00:00:00 2001
From: ZVN DEV <78920650+zvndev@users.noreply.github.com>
Date: Wed, 17 Jun 2026 00:53:37 -0400
Subject: [PATCH] release: bump to v0.5.1

Dependency-refresh point release on top of v0.5.0. The only
published-artifact change is zeroize 1.8.2 -> 1.9.0 (secret zeroing in
powdb-auth/powdb-server); everything else since v0.5.0 is CI/dev/docs
(explicit nightly fuzz toolchain, postgres + @types/node dev bumps,
backlog docs). No runtime or wire-protocol changes.

- Cargo workspace 0.5.0 -> 0.5.1 (all 8 crates via workspace.package)
- TS client package.json + CLIENT_VERSION -> 0.5.1 (kept in sync for the
  ci.yml ts-client consistency gate)
- CHANGELOG [0.5.1] entry; RELEASES.md current-release pointer
- Cargo.lock regenerated

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
---
 CHANGELOG.md            |  9 +++++++++
 Cargo.lock              | 16 ++++++++--------
 Cargo.toml              |  2 +-
 RELEASES.md             |  2 +-
 clients/ts/package.json |  2 +-
 clients/ts/src/index.ts |  2 +-
 6 files changed, 21 insertions(+), 12 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index e133484..1905a7a 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -7,6 +7,15 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [0.5.1] - 2026-06-17
+
+### Changed
+- Bumped `zeroize` 1.8.2 → 1.9.0, the dependency used to scrub secrets from memory in `powdb-auth` and `powdb-server`.
+
+### Internal
+- Pinned the fuzz workflow to an explicit `nightly` toolchain so cargo-fuzz builds survive `dtolnay/rust-toolchain` SHA bumps.
+- Routine dev-dependency bumps (`postgres` test harness, `@types/node`) and a remaining-work backlog docs refresh. No runtime or wire-protocol changes.
+
 ## [0.5.0] - 2026-06-16
 
 ### Added
diff --git a/Cargo.lock b/Cargo.lock
index 1fc77eb..c328cb3 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -1820,7 +1820,7 @@ dependencies = [
 
 [[package]]
 name = "powdb-auth"
-version = "0.5.0"
+version = "0.5.1"
 dependencies = [
  "argon2",
  "serde",
@@ -1832,7 +1832,7 @@ dependencies = [
 
 [[package]]
 name = "powdb-backup"
-version = "0.5.0"
+version = "0.5.1"
 dependencies = [
  "blake3",
  "powdb-query",
@@ -1843,7 +1843,7 @@ dependencies = [
 
 [[package]]
 name = "powdb-bench"
-version = "0.5.0"
+version = "0.5.1"
 dependencies = [
  "criterion",
  "powdb-query",
@@ -1854,7 +1854,7 @@ dependencies = [
 
 [[package]]
 name = "powdb-cli"
-version = "0.5.0"
+version = "0.5.1"
 dependencies = [
  "powdb-auth",
  "powdb-backup",
@@ -1869,7 +1869,7 @@ dependencies = [
 
 [[package]]
 name = "powdb-compare"
-version = "0.5.0"
+version = "0.5.1"
 dependencies = [
  "mysql",
  "postgres",
@@ -1881,7 +1881,7 @@ dependencies = [
 
 [[package]]
 name = "powdb-query"
-version = "0.5.0"
+version = "0.5.1"
 dependencies = [
  "powdb-storage",
  "rustc-hash",
@@ -1892,7 +1892,7 @@ dependencies = [
 
 [[package]]
 name = "powdb-server"
-version = "0.5.0"
+version = "0.5.1"
 dependencies = [
  "bytes",
  "powdb-auth",
@@ -1912,7 +1912,7 @@ dependencies = [
 
 [[package]]
 name = "powdb-storage"
-version = "0.5.0"
+version = "0.5.1"
 dependencies = [
  "bytes",
  "crc32fast",
diff --git a/Cargo.toml b/Cargo.toml
index 9c715af..22ea5a0 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -3,7 +3,7 @@ resolver = "2"
 members = ["crates/*"]
 
 [workspace.package]
-version = "0.5.0"
+version = "0.5.1"
 edition = "2021"
 rust-version = "1.93"
 license = "MIT"
diff --git a/RELEASES.md b/RELEASES.md
index 578e94d..c709e61 100644
--- a/RELEASES.md
+++ b/RELEASES.md
@@ -3,7 +3,7 @@
 Every PowDB release ships to the following registries and platforms.
 When cutting a release, follow the checklist at the bottom.
 
-> **Current release candidate: v0.5.0** (publish/deploy only after explicit production authority).
+> **Current release: v0.5.1** (v0.5.0 shipped 2026-06-17; v0.5.1 is a dependency-refresh point release).
 > **v0.4.1, v0.4.2, and v0.4.3 are yanked** for crash-recovery data-loss bugs;
 > 0.4.4 fixed them and added a standing durability regression suite. See
 > `CHANGELOG.md`.
diff --git a/clients/ts/package.json b/clients/ts/package.json
index 4663834..8d2b13b 100644
--- a/clients/ts/package.json
+++ b/clients/ts/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@zvndev/powdb-client",
-  "version": "0.5.0",
+  "version": "0.5.1",
   "description": "TypeScript client for PowDB (PowQL wire protocol)",
   "type": "module",
   "packageManager": "pnpm@10.29.3",
diff --git a/clients/ts/src/index.ts b/clients/ts/src/index.ts
index ece89bb..e527a94 100644
--- a/clients/ts/src/index.ts
+++ b/clients/ts/src/index.ts
@@ -32,7 +32,7 @@ import {
 } from "./typed.js";
 
 /** Client library version. Compared to the server's reported version. */
-export const CLIENT_VERSION = "0.5.0";
+export const CLIENT_VERSION = "0.5.1";
 
 export type QueryResult =
   | { kind: "rows"; columns: string[]; rows: string[][] }