diff --git a/.github/workflows/docs.yml b/.github/workflows/docs.yml
index f0700b2..e24511c 100644
--- a/.github/workflows/docs.yml
+++ b/.github/workflows/docs.yml
@@ -55,11 +55,11 @@ jobs:
 
             - name: Setup Pages
               if: github.ref == 'refs/heads/main'
-              uses: actions/configure-pages@983d7736d9b0ae728b81ab479565c72886d7745b # v5.0.0
+              uses: actions/configure-pages@45bfe0192ca1faeb007ade9deae92b16b8254a0d # v6.0.0
 
             - name: Upload artifact
               if: github.ref == 'refs/heads/main'
-              uses: actions/upload-pages-artifact@7b1f4a764d45c48632c6b24a0339c27f5614fb0b # v4.0.0
+              uses: actions/upload-pages-artifact@fc324d3547104276b827a68afc52ff2a11cc49c9 # v5.0.0
               with:
                   path: docs/book
 
diff --git a/.github/workflows/release-plz.yml b/.github/workflows/release-plz.yml
index bffd2e1..3ee7490 100644
--- a/.github/workflows/release-plz.yml
+++ b/.github/workflows/release-plz.yml
@@ -24,7 +24,7 @@ jobs:
           install: true
           install_args: "--locked"
       - name: Run release-plz
-        uses: release-plz/action@1528104d2ca23787631a1c1f022abb64b34c1e11 # v0.5
+        uses: release-plz/action@e8792575c7f2366cf6ff3ccc33ead9ace5b691c7 # v0.5
         with:
           command: release
         env:
@@ -50,7 +50,7 @@ jobs:
           install: true
           install_args: "--locked"
       - name: Run release-plz
-        uses: release-plz/action@1528104d2ca23787631a1c1f022abb64b34c1e11 # v0.5
+        uses: release-plz/action@e8792575c7f2366cf6ff3ccc33ead9ace5b691c7 # v0.5
         with:
           command: release-pr
         env:
diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml
index 427336c..397fef3 100644
--- a/.github/workflows/scorecard.yml
+++ b/.github/workflows/scorecard.yml
@@ -31,7 +31,7 @@ jobs:
           publish_results: true
 
       - name: "Upload artifact"
-        uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
         with:
           name: SARIF file
           path: results.sarif
diff --git a/CHANGELOG.md b/CHANGELOG.md
index f32b61f..87e751c 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -2,6 +2,17 @@
 
 All notable changes to this project will be documented in this file.
 
+## [0.1.2] - 2026-06-24
+
+### Dependencies
+
+- Bump `thiserror` to 2.0.18
+- Bump `windows` to 0.62.2
+- Bump `proptest` (dev) to 1.10
+
+### Miscellaneous
+
+- CI/tooling only (no library changes): Mergify auto-merge for bot PRs, `mise.lock` refresh, OpenSSF Scorecard + Best Practices badges, and least-privilege workflow permissions
 
 ## [0.1.1] - 2026-03-09
 
@@ -86,4 +97,5 @@ All notable changes to this project will be documented in this file.
 - **docs**: Reorder allowed licenses in deny.toml for clarity
 - **tools**: Add mise-lock-check and adjust tooling configs
 - Release v0.1.1 ([#2](https://github.com/EvilBit-Labs/token-privilege/pull/2))
+
 <!-- generated by git-cliff -->
diff --git a/Cargo.toml b/Cargo.toml
index 1438c53..1eb0369 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -1,9 +1,9 @@
 [package]
 name = "token-privilege"
-version = "0.1.1"
+version = "0.1.2"
 edition = "2024"
 authors = [
-    "UncleSp1d3r <unclespid3r@evilbitlabs.io>",
+    "UncleSp1d3r <unclesp1d3r@evilbitlabs.io>",
     "KryptoKat <kryptokat@evilbitlabs.io>",
 ]
 description = "Safe Rust wrapper around Windows process token privilege and elevation detection APIs"