diff --git a/.release-please-manifest.json b/.release-please-manifest.json
index d5b91b1..7639d7a 100644
--- a/.release-please-manifest.json
+++ b/.release-please-manifest.json
@@ -1,3 +1,3 @@
 {
-  ".": "0.23.0"
+  ".": "0.23.1"
 }
diff --git a/CHANGELOG.md b/CHANGELOG.md
index a5529d8..ad03891 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,5 +1,13 @@
 # Changelog
 
+## [0.23.1](https://github.com/githubnext/ado-aw/compare/v0.23.0...v0.23.1) (2026-05-07)
+
+
+### Bug Fixes
+
+* **safeoutputs:** rewrite upload-pipeline-artifact flow to fix HTTP 405 ([#425](https://github.com/githubnext/ado-aw/issues/425)) ([5e4c89e](https://github.com/githubnext/ado-aw/commit/5e4c89eeeb7a401bc677f2a8e3a65832a6aebdf4))
+* **security:** harden upload path validation and trigger filter script integrity ([#428](https://github.com/githubnext/ado-aw/issues/428)) ([84a2031](https://github.com/githubnext/ado-aw/commit/84a203100e935585b805792cb9453dc30955a6c2))
+
 ## [0.23.0](https://github.com/githubnext/ado-aw/compare/v0.22.4...v0.23.0) (2026-05-06)
 
 
diff --git a/Cargo.lock b/Cargo.lock
index 1449834..ea8770d 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -4,7 +4,7 @@ version = 4
 
 [[package]]
 name = "ado-aw"
-version = "0.23.0"
+version = "0.23.1"
 dependencies = [
  "ado-aw-derive",
  "anyhow",
diff --git a/Cargo.toml b/Cargo.toml
index 86c0711..94441ec 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "ado-aw"
-version = "0.23.0"
+version = "0.23.1"
 edition = "2024"
 
 [dependencies]