feat(go): add automated FFI library installer

Add install command that automatically downloads the correct FFI library
for the user's platform from GitHub releases, eliminating manual setup:

- Supports macOS ARM64, Linux x86_64/ARM64, and Windows x86_64
- Validates semver version format to prevent URL manipulation
- Implements path traversal protection and decompression bomb prevention
- Uses HTTP timeout and proper resource cleanup
- Outputs platform-specific CGO flags needed to build

Usage: go run github.com/kreuzberg-dev/kreuzberg/packages/go/v4/cmd/install@latest

Closes #281

Author: Goldziher

CHANGELOG.md

@@ -7,6 +7,20 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ---
 
+## [4.0.5] - 2026-01-14
+
+### Added
+
+#### Go Module
+- **Automated FFI library installer**: New install command automatically downloads the correct FFI library for your platform from GitHub releases ([#281](https://github.com/kreuzberg-dev/kreuzberg/issues/281))
+  - Run `go run github.com/kreuzberg-dev/kreuzberg/packages/go/v4/cmd/install@latest` to install
+  - Supports macOS ARM64, Linux x86_64/ARM64, and Windows x86_64
+  - Outputs platform-specific CGO flags needed to build
+  - Eliminates manual download and configuration steps
+  - Security hardened: semver validation, path traversal protection, decompression bomb prevention, HTTP timeout
+
+---
+
 ## [4.0.4] - 2026-01-13
 
 ### Fixed

Cargo.lock

@@ -22,7 +22,7 @@ kreuzberg = { path = "crates/kreuzberg" }
 kreuzberg-tesseract = { path = "crates/kreuzberg-tesseract" }
 
 [workspace.package]
-version = "4.0.4"
+version = "4.0.5"
 edition = "2024"
 rust-version = "1.91"
 authors = ["Na'aman Hirschfeld <nhirschfeld@gmail.com>"]

Cargo.toml

@@ -1,7 +1,7 @@
 {
     "name": "kreuzberg/kreuzberg",
     "description": "High-performance document intelligence for PHP. Extract text, metadata, and structured information from PDFs, Office documents, images, and 56 formats. Powered by Rust core for 10-50x speed improvements.",
-    "version": "4.0.4",
+    "version": "4.0.5",
     "type": "php-ext",
     "license": "MIT",
     "keywords": [

composer.json

@@ -1,6 +1,6 @@
 {
 	"name": "@kreuzberg/node-darwin-arm64",
-	"version": "4.0.4",
+	"version": "4.0.5",
 	"cpu": [
 		"arm64"
 	],

crates/kreuzberg-node/npm/darwin-arm64/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@kreuzberg/node-darwin-x64",
-	"version": "4.0.4",
+	"version": "4.0.5",
 	"cpu": [
 		"x64"
 	],

crates/kreuzberg-node/npm/darwin-x64/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@kreuzberg/node-linux-arm-gnueabihf",
-	"version": "4.0.4",
+	"version": "4.0.5",
 	"cpu": [
 		"arm"
 	],

crates/kreuzberg-node/npm/linux-arm-gnueabihf/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@kreuzberg/node-linux-arm64-gnu",
-	"version": "4.0.4",
+	"version": "4.0.5",
 	"cpu": [
 		"arm64"
 	],

crates/kreuzberg-node/npm/linux-arm64-gnu/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@kreuzberg/node-linux-x64-gnu",
-	"version": "4.0.4",
+	"version": "4.0.5",
 	"cpu": [
 		"x64"
 	],

crates/kreuzberg-node/npm/linux-x64-gnu/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@kreuzberg/node-win32-arm64-msvc",
-	"version": "4.0.4",
+	"version": "4.0.5",
 	"cpu": [
 		"arm64"
 	],