diff --git a/CHANGELOG.fork.md b/CHANGELOG.fork.md
index b13c6930..eac6b0cf 100644
--- a/CHANGELOG.fork.md
+++ b/CHANGELOG.fork.md
@@ -2,10 +2,21 @@
 
 Release notes for `@variablelab/portless`. Upstream's own history is in [CHANGELOG.md](./CHANGELOG.md).
 
-## 0.0.1
+## 0.0.2
 
 <!-- release:start -->
 
+Based on upstream [portless v0.15.6](https://github.com/vercel-labs/portless/releases/tag/v0.15.6) (upstream `main` at `1ad573b`), unchanged since 0.0.1.
+
+### Changed
+
+- Releases are published through npm trusted publishing (GitHub OIDC) instead of a long-lived token. This release is the first to use it.
+- Fixed the `contributors` entry in `package.json` so npm shows the maintainer's name and profile url correctly.
+
+<!-- release:end -->
+
+## 0.0.1
+
 First release of the fork, based on upstream [portless v0.15.6](https://github.com/vercel-labs/portless/releases/tag/v0.15.6) (upstream `main` at `1ad573b`).
 
 ### Added
@@ -16,5 +27,3 @@ First release of the fork, based on upstream [portless v0.15.6](https://github.c
 
 - Published as `@variablelab/portless`. The installed command is still `portless`.
 - The npm tarball now includes `LICENSE` and `NOTICE`.
-
-<!-- release:end -->
diff --git a/packages/portless/package.json b/packages/portless/package.json
index 3f873535..ede0cb0b 100644
--- a/packages/portless/package.json
+++ b/packages/portless/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@variablelab/portless",
-  "version": "0.0.1",
+  "version": "0.0.2",
   "description": "Fork of vercel-labs/portless with path-based routing (--path). Replace port numbers with stable, named .localhost URLs and route several apps under one hostname by URL prefix.",
   "type": "module",
   "main": "./dist/index.js",