diff --git a/.release-please-manifest.json b/.release-please-manifest.json
index 2be9c43..af55ef0 100644
--- a/.release-please-manifest.json
+++ b/.release-please-manifest.json
@@ -1,3 +1,3 @@
 {
-  ".": "0.2.0"
+  ".": "0.2.1"
 }
diff --git a/CHANGELOG.md b/CHANGELOG.md
index f7ad4e6..cb5fe50 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -5,6 +5,18 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [0.2.1](https://github.com/cachekit-io/cachekit-core/compare/cachekit-core-v0.2.0...cachekit-core-v0.2.1) (2026-05-31)
+
+
+### Bug Fixes
+
+* use local> preset ref for private renovate-config repo ([#29](https://github.com/cachekit-io/cachekit-core/issues/29)) ([80355a4](https://github.com/cachekit-io/cachekit-core/commit/80355a49806b36a2b759be9fdfd9e0536cd43476))
+
+
+### Security
+
+* seed nonce instance counter with 8 random bytes, raising cross-process collision resistance from 2^32 to 2^64 (HIGH-2/HIGH-3) ([#36](https://github.com/cachekit-io/cachekit-core/issues/36)) ([af3d5fe](https://github.com/cachekit-io/cachekit-core/commit/af3d5fec0d66a95fb2b8994bbdb761ec01cede9d))
+
 ## [0.2.0](https://github.com/cachekit-io/cachekit-core/compare/cachekit-core-v0.1.1...cachekit-core-v0.2.0) (2026-03-16)
 
 
diff --git a/Cargo.lock b/Cargo.lock
index b2d4d9a..d43bfdd 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -175,7 +175,7 @@ checksum = "1e748733b7cbc798e1434b6ac524f0c1ff2ab456fe201501e6497c8417a4fc33"
 
 [[package]]
 name = "cachekit-core"
-version = "0.2.0"
+version = "0.2.1"
 dependencies = [
  "aes",
  "aes-gcm",
diff --git a/Cargo.toml b/Cargo.toml
index 89b4317..dd2e46b 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "cachekit-core"
-version = "0.2.0"
+version = "0.2.1"
 edition = "2021"
 authors = ["cachekit Contributors"]
 description = "LZ4 compression, xxHash3 integrity, AES-256-GCM encryption for byte payloads"