diff --git a/CHANGELOG.md b/CHANGELOG.md
index f0e1c52..36976f4 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -4,6 +4,12 @@ All notable changes to this project are documented here. The format follows
 [Keep a Changelog](https://keepachangelog.com/en/1.1.0/); this project adheres to
 [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [0.2.1](https://github.com/SecurityRonin/blob-decoder/compare/blob-decoder-v0.2.0...blob-decoder-v0.2.1) - 2026-08-07
+
+### Fixed
+
+- *(supply-chain)* trust protobuf-forensic-core as ours instead of exempting it
+
 ## [0.2.0](https://github.com/SecurityRonin/blob-decoder/compare/blob-decoder-v0.1.1...blob-decoder-v0.2.0) - 2026-07-29
 
 ### Added
diff --git a/Cargo.lock b/Cargo.lock
index 8130e0c..e756308 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -66,7 +66,7 @@ checksum = "72b3254f16251a8381aa12e40e3c4d2f0199f8c6508fbecb9d91f575e0fbb8c6"
 
 [[package]]
 name = "blob-decoder"
-version = "0.2.0"
+version = "0.2.1"
 dependencies = [
  "base64",
  "clap",
diff --git a/Cargo.toml b/Cargo.toml
index b1d719f..2ea8c07 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "blob-decoder"
-version = "0.2.0"
+version = "0.2.1"
 edition = "2021"
 rust-version = "1.88.0"
 license = "Apache-2.0"