fix(release): install OpenSSL dev headers in manylinux build; bump to 0.1.22

The 0.1.21 release tagged but never published — every Linux wheel job
failed at build time with 'Could not find openssl via pkg-config'. The
manylinux_2_28 base image ships without OpenSSL development headers,
which the new native-tls path now needs.

- Add openssl-devel/libssl-dev install to before-script-linux
  (covers manylinux_2_28 dnf, CentOS yum, Debian apt)
- Bump version to 0.1.22 (tag-only retry on top of 0.1.21 deps)
- CHANGELOG entry for 0.1.22 + warn on 0.1.21

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

Author: affandar

.github/workflows/publish.yml

@@ -53,6 +53,14 @@ jobs:
           args: --release --out dist --interpreter python3.12
           manylinux: "2_28"
           before-script-linux: |
+            # Install OpenSSL dev headers for native-tls (replaces ring/rustls)
+            if command -v dnf > /dev/null; then
+              dnf install -y openssl-devel pkgconfig
+            elif command -v yum > /dev/null; then
+              yum install -y openssl-devel pkgconfig
+            elif command -v apt-get > /dev/null; then
+              apt-get update && apt-get install -y libssl-dev pkg-config
+            fi
             # maturin_2_28 images expose pythons at /opt/python/*/bin but not on PATH
             ln -sf /opt/python/cp312-cp312/bin/python3 /usr/local/bin/python3 || true
           sccache: "true"

CHANGELOG.md

@@ -5,6 +5,16 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [0.1.22] - 2026-04-23
+
+### Fixed
+
+- **Linux wheel build** — Install `openssl-devel` (manylinux_2_28) /
+  `libssl-dev` (Debian) in the `before-script-linux` step so the new
+  `native-tls` backend can find OpenSSL via pkg-config. Previous attempt
+  (0.1.21) tagged but never published because every Linux wheel job failed
+  with "Could not find openssl via pkg-config".
+
 ## [0.1.21] - 2026-04-23
 
 ### Changed
@@ -13,6 +23,8 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 - **Bumped `duroxide-pg` dependency** — `0.1.29` → `0.1.30` (same `ring`-drop cascade)
 - No source changes in the Python SDK; pure dependency uplift
 
+> ⚠️ **Do not use 0.1.21** — never published to PyPI. Use 0.1.22.
+
 ## [0.1.20] - 2026-04-17
 
 ### Added

Cargo.toml

@@ -1,6 +1,6 @@
 [package]
 name = "duroxide-python"
-version = "0.1.21"
+version = "0.1.22"
 edition = "2021"
 
 [lib]

pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "maturin"
 
 [project]
 name = "duroxide"
-version = "0.1.21"
+version = "0.1.22"
 description = "Python SDK for the Duroxide durable execution runtime"
 readme = "README.md"
 license = { text = "MIT" }