From 29ea7096b1f3f3f4c5b6afe318db41ee5d29feb0 Mon Sep 17 00:00:00 2001
From: Luke Wilkinson <95864695+krakenhavoc@users.noreply.github.com>
Date: Mon, 8 Jun 2026 23:20:11 -0400
Subject: [PATCH] =?UTF-8?q?docs:=20weekly=20audit=20=E2=80=94=20CHANGELOG?=
 =?UTF-8?q?=20v0.2.0=20on-demand=20scan=20API?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Add missing [0.2.0] - 2026-05-03 release section:
- POST /scan on-demand scan API
- KK_PROBE_SCAN_API_ENABLED and KK_PROBE_SCAN_API_SECRET env vars
- X-Probe-Secret header authentication
Add empty [Unreleased] section at top and fix link references.
---
 CHANGELOG.md | 11 +++++++++++
 1 file changed, 11 insertions(+)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index dbc904b..417d589 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -5,6 +5,16 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [Unreleased]
+
+## [0.2.0] - 2026-05-03
+
+### Added
+
+- `POST /scan` on-demand scan API: triggers an immediate TLS scan for a given host and port without waiting for the next scheduled interval. Authentication uses a shared secret passed via the `X-Probe-Secret` header.
+- `KK_PROBE_SCAN_API_ENABLED` environment variable (default: `false`) — enable or disable the on-demand scan endpoint at runtime without restarting the probe.
+- `KK_PROBE_SCAN_API_SECRET` environment variable — shared secret for the `POST /scan` endpoint. Minimum 32 characters. Required when `KK_PROBE_SCAN_API_ENABLED=true`.
+
 ## [0.1.0] - 2026-03-17
 
 ### Added
@@ -22,4 +32,5 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 - CI pipeline with lint, test, and build matrix
 - Kubernetes deployment example with ConfigMap, Secrets, and health probes
 
+[0.2.0]: https://github.com/krakenkey/probe/releases/tag/v0.2.0
 [0.1.0]: https://github.com/krakenkey/probe/releases/tag/v0.1.0