diff --git a/.release-please-manifest.json b/.release-please-manifest.json
index 69535c6..461d94a 100644
--- a/.release-please-manifest.json
+++ b/.release-please-manifest.json
@@ -1,3 +1,3 @@
 {
-  ".": "0.2.4"
+  ".": "0.2.5"
 }
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 78670e7..8cc1a2d 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,5 +1,12 @@
 # Changelog
 
+## [0.2.5](https://github.com/contextbridge/patchwave-analysis/compare/v0.2.4...v0.2.5) (2026-05-29)
+
+
+### Bug Fixes
+
+* publish verifiable build provenance for releases ([#32](https://github.com/contextbridge/patchwave-analysis/issues/32)) ([560aeee](https://github.com/contextbridge/patchwave-analysis/commit/560aeeeb6aa42626d224e5870d60a5d5e38b1e14))
+
 ## [0.2.4](https://github.com/contextbridge/patchwave-analysis/compare/v0.2.3...v0.2.4) (2026-05-28)
 
 
diff --git a/package.json b/package.json
index f5dbc80..bbf08a1 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "patchwave-analysis",
-  "version": "0.2.4",
+  "version": "0.2.5",
   "description": "Diagnostic CLI that measures Dependabot toil and CVE exposure across a GitHub org.",
   "type": "module",
   "bin": {