diff --git a/CHANGELOG.md b/CHANGELOG.md
index 330a3e5..5649a85 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,5 +1,10 @@
 # Changelog
 
+## v0.2.2 - 08/06/2026
+
+### Configuration
+- Bump the pinned action SHAs (Dependabot): `actions/checkout` v6, `actions/setup-node` v6, `actions/upload-artifact` v7, `actions/download-artifact` v8, `actions/dependency-review-action` (v4 SHA), `renovatebot/github-action` v46.1.15.
+
 ## v0.2.1 - 08/06/2026
 
 ### Refactor
diff --git a/package.json b/package.json
index f26e262..5d83fe4 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@coroboros/ci",
-  "version": "0.2.1",
+  "version": "0.2.2",
   "private": true,
   "description": "Reusable GitHub Actions CI for the Coroboros stack.",
   "license": "SEE LICENSE IN LICENSE.md",