diff --git a/docs/release-notes/v0.2.0.md b/docs/release-notes/v0.2.0.md
new file mode 100644
index 0000000..8777dac
--- /dev/null
+++ b/docs/release-notes/v0.2.0.md
@@ -0,0 +1,17 @@
+## v0.2.0
+
+Tightens input validation around `add` and `import` so invalid URLs can no longer slip into the database.
+
+### New
+
+- Validate blog and feed URLs on `add` — only `http` and `https` URLs with a non-empty host are accepted. Inputs like `ftp://…`, `example.com`, or `https://` are now rejected up front (#18, #19)
+
+### Improved
+
+- `import` (OPML) skips entries with invalid URLs instead of aborting the whole file — partial imports now continue past bad entries (#18)
+- URL validation collapsed into a single helper so the blog URL and feed URL go through the same rules (#19)
+
+### Contributors
+
+- [@sroecker](https://github.com/sroecker) — URL validation (#18)
+- [@JulienTant](https://github.com/JulienTant)