diff --git a/CHANGELOG.md b/CHANGELOG.md
index be67e47..1f2672c 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -7,6 +7,19 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [0.1.2] - 2026-02-16
+
+### Highlights
+
+- Added SSRF protection with safe-by-default DNS resolution policy
+- Private/reserved IP ranges are now blocked by default to prevent server-side request forgery
+
+### What's Changed
+
+* feat(security)!: add SSRF protection with safe-by-default DNS policy ([#17](https://github.com/everruns/fetchkit/pull/17))
+
+**Full Changelog**: https://github.com/everruns/fetchkit/compare/v0.1.1...v0.1.2
+
 ## [0.1.1] - 2026-02-12
 
 ### Highlights
@@ -44,6 +57,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 **Full Changelog**: https://github.com/everruns/fetchkit/commits/v0.1.0
 
-[Unreleased]: https://github.com/everruns/fetchkit/compare/v0.1.1...HEAD
+[Unreleased]: https://github.com/everruns/fetchkit/compare/v0.1.2...HEAD
+[0.1.2]: https://github.com/everruns/fetchkit/compare/v0.1.1...v0.1.2
 [0.1.1]: https://github.com/everruns/fetchkit/compare/v0.1.0...v0.1.1
 [0.1.0]: https://github.com/everruns/fetchkit/releases/tag/v0.1.0
diff --git a/Cargo.toml b/Cargo.toml
index b8309cc..6886103 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -3,7 +3,7 @@ resolver = "2"
 members = ["crates/*"]
 
 [workspace.package]
-version = "0.1.1"
+version = "0.1.2"
 edition = "2021"
 license = "MIT"
 authors = ["Everruns"]
diff --git a/crates/fetchkit-cli/Cargo.toml b/crates/fetchkit-cli/Cargo.toml
index f1a6e76..15540f3 100644
--- a/crates/fetchkit-cli/Cargo.toml
+++ b/crates/fetchkit-cli/Cargo.toml
@@ -15,7 +15,7 @@ name = "fetchkit"
 path = "src/main.rs"
 
 [dependencies]
-fetchkit = { path = "../fetchkit", version = "0.1.1" }
+fetchkit = { path = "../fetchkit", version = "0.1.2" }
 tokio = { workspace = true }
 clap = { workspace = true }
 serde = { workspace = true }