diff --git a/CHANGELOG.md b/CHANGELOG.md
index 442a8aa..81dd88b 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,5 +1,15 @@
 # Changelog
 
+## [0.2.1](https://github.com/SecurityRonin/shellitem/compare/shellitem-v0.2.0...shellitem-v0.2.1) - 2026-07-25
+
+### Documentation
+
+- use verbatim Apache-2.0 license text
+
+### Fixed
+
+- *(vet)* declare own crates first-party so version bumps don't break supply-chain audit
+
 ## 0.1.0 — 2026-06-13
 
 Initial release. `parse_idlist` + `reconstruct_path` over Windows `ITEMIDLIST`
diff --git a/Cargo.lock b/Cargo.lock
index ec225c1..cf236ac 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -29,7 +29,7 @@ dependencies = [
 
 [[package]]
 name = "shellitem"
-version = "0.2.0"
+version = "0.2.1"
 dependencies = [
  "forensicnomicon",
 ]
diff --git a/Cargo.toml b/Cargo.toml
index 3e76701..09949ed 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "shellitem"
-version = "0.2.0"
+version = "0.2.1"
 edition = "2021"
 rust-version = "1.81"
 license = "Apache-2.0"