diff --git a/.changeset/brave-poets-decide.md b/.changeset/brave-poets-decide.md
deleted file mode 100644
index be56705..0000000
--- a/.changeset/brave-poets-decide.md
+++ /dev/null
@@ -1,9 +0,0 @@
----
-'@monocloud/authentication-api': patch
----
-
-Add certificate binding validation modes.
-
-- `ValidateCertificateBinding` is now a `CertificateBindingValidation` enum instead of a `Func<HttpContext, bool>`.
-- Tokens whose `cnf` (confirmation) claim carries an `x5t#S256` thumbprint are now validated by default; previously the default never validated. Replace `ValidateCertificateBinding = _ => true` with `CertificateBindingValidation.Required`, and set `CertificateBindingValidation.DangerouslyIgnore` to opt out entirely.
-- A `CertificateRetriever` that throws now fails authentication with a 401 `invalid_token` challenge (`Client certificate is malformed`) instead of surfacing a 500.
diff --git a/CHANGELOG.md b/CHANGELOG.md
index d12635b..6fb7f4a 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,5 +1,15 @@
 # @monocloud/authentication-api
 
+## 0.1.5
+
+### Patch Changes
+
+- a2edb9a: Add certificate binding validation modes.
+
+  - `ValidateCertificateBinding` is now a `CertificateBindingValidation` enum instead of a `Func<HttpContext, bool>`.
+  - Tokens whose `cnf` (confirmation) claim carries an `x5t#S256` thumbprint are now validated by default; previously the default never validated. Replace `ValidateCertificateBinding = _ => true` with `CertificateBindingValidation.Required`, and set `CertificateBindingValidation.DangerouslyIgnore` to opt out entirely.
+  - A `CertificateRetriever` that throws now fails authentication with a 401 `invalid_token` challenge (`Client certificate is malformed`) instead of surfacing a 500.
+
 ## 0.1.4
 
 ### Patch Changes
diff --git a/Directory.Packages.props b/Directory.Packages.props
index bcceeab..e294124 100644
--- a/Directory.Packages.props
+++ b/Directory.Packages.props
@@ -3,7 +3,7 @@
     <LangVersion>14.0</LangVersion>
     <Nullable>enable</Nullable>
     <SignAssembly>true</SignAssembly>
-    <Version>0.1.4</Version>
+    <Version>0.1.5</Version>
     <AssemblyVersion>0.0.1</AssemblyVersion>
     <FileVersion>0.0.1</FileVersion>
     <Company>MonoCloud</Company>
diff --git a/package.json b/package.json
index 35d4ea8..d1b515d 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@monocloud/authentication-api",
-  "version": "0.1.4",
+  "version": "0.1.5",
   "private": true,
   "scripts": {
     "changeset": "changeset",