From 8e08e1bd90fb111306d3e9b5e3d005749484c7a3 Mon Sep 17 00:00:00 2001
From: "github-actions[bot]"
 <41898282+github-actions[bot]@users.noreply.github.com>
Date: Sat, 3 Oct 2026 19:42:50 +0000
Subject: [PATCH] chore(release): hoolicy 0.4.1

## 0.4.1 (2026-10-03)

### Bug Fixes

- **hoolicy:** harden policy evaluation and polish CLI workflows (#35) (13b8f61)

### Other Changes

- **hoolicy:** add contributor and user agent skills (#34) (95fa1e8)
- **hoolicy:** recover unpublished release preparation (#37) (52e319f)
---
 CHANGELOG.md             | 11 +++++++++++
 README.md                |  6 +++---
 VERSION                  |  2 +-
 actions/README.md        |  2 +-
 actions/check/action.yml |  2 +-
 actions/setup/action.yml |  2 +-
 6 files changed, 18 insertions(+), 7 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 3180e9f..5a03ede 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,5 +1,16 @@
 # Changelog
 
+## 0.4.1 (2026-10-03)
+
+### Bug Fixes
+
+- **hoolicy:** harden policy evaluation and polish CLI workflows (#35) (13b8f61)
+
+### Other Changes
+
+- **hoolicy:** add contributor and user agent skills (#34) (95fa1e8)
+- **hoolicy:** recover unpublished release preparation (#37) (52e319f)
+
 ## 0.4.0 (2026-09-22)
 
 ### Features
diff --git a/README.md b/README.md
index 614781f..ae912ad 100644
--- a/README.md
+++ b/README.md
@@ -37,8 +37,8 @@ For unpublished changes, pass the local checkout path instead of
 Install a release binary, use the container, or build with Go 1.26+:
 
 ```sh
-go install github.com/openhoo/hoolicy/cmd/hoolicy@v0.4.0
-# or: docker run --rm --user "$(id -u):$(id -g)" -v "$PWD:/work:ro" -w /work ghcr.io/openhoo/hoolicy:v0.4.0 check
+go install github.com/openhoo/hoolicy/cmd/hoolicy@v0.4.1
+# or: docker run --rm --user "$(id -u):$(id -g)" -v "$PWD:/work:ro" -w /work ghcr.io/openhoo/hoolicy:v0.4.1 check
 ```
 
 For rootless Podman, add `--userns=keep-id`. Mapping the caller UID lets the non-root image read private repository files without weakening their host permissions.
@@ -149,7 +149,7 @@ Use this repository as a versioned remote pack source:
 packs:
   - name: repository
     git: https://github.com/openhoo/hoolicy.git
-    ref: v0.4.0
+    ref: v0.4.1
     subdir: packs/repository
     with:
       branch_pattern: '^(feat|fix|chore)/[a-z0-9]+(?:-[a-z0-9]+)*$'
diff --git a/VERSION b/VERSION
index 1d0ba9e..267577d 100644
--- a/VERSION
+++ b/VERSION
@@ -1 +1 @@
-0.4.0
+0.4.1
diff --git a/actions/README.md b/actions/README.md
index f07ece8..68cbb39 100644
--- a/actions/README.md
+++ b/actions/README.md
@@ -5,7 +5,7 @@ Use immutable action revisions in consuming repositories.
 ```yaml
 - uses: openhoo/hoolicy/actions/check@<full-commit-sha>
   with:
-    version: 0.4.0
+    version: 0.4.1
 ```
 
 `actions/setup` installs a pinned Cosign verifier, downloads the release archive,
diff --git a/actions/check/action.yml b/actions/check/action.yml
index 8f46a6d..c2279d1 100644
--- a/actions/check/action.yml
+++ b/actions/check/action.yml
@@ -4,7 +4,7 @@ inputs:
   version:
     description: Hoolicy release version to install.
     required: false
-    default: "0.4.0"
+    default: "0.4.1"
   executable:
     description: Optional Hoolicy executable path; skips release installation when set.
     required: false
diff --git a/actions/setup/action.yml b/actions/setup/action.yml
index 7d59e5d..dee96eb 100644
--- a/actions/setup/action.yml
+++ b/actions/setup/action.yml
@@ -4,7 +4,7 @@ inputs:
   version:
     description: Hoolicy release version to install.
     required: false
-    default: "0.4.0"
+    default: "0.4.1"
 outputs:
   version:
     description: Hoolicy version configured by this action.