From 1cd5de44257ed6397e471dd2ce0bca0a418bf00a Mon Sep 17 00:00:00 2001
From: Luke Wilkinson <95864695+krakenhavoc@users.noreply.github.com>
Date: Mon, 29 Jun 2026 23:13:51 -0400
Subject: [PATCH] =?UTF-8?q?docs:=20add=20v0.2.0=20scan=20API=20entries=20t?=
 =?UTF-8?q?o=20CHANGELOG=20=E2=80=94=20weekly=20audit=202026-06-30?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

- Add [Unreleased] section
- Add [0.2.0] - 2026-05-03: POST /scan endpoint, KK_PROBE_SCAN_API_ENABLED,
  KK_PROBE_SCAN_API_SECRET, ScanAPIConfig struct
---
 CHANGELOG.md | 13 +++++++++++++
 1 file changed, 13 insertions(+)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index dbc904b..0a90e80 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -5,6 +5,19 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [Unreleased]
+
+## [0.2.0] - 2026-05-03
+
+### Added
+
+- `POST /scan` endpoint — public scan API, proxied by the KrakenKey backend's `PublicScanModule`; disabled by default
+- `KK_PROBE_SCAN_API_ENABLED` environment variable (default: `false`); set to `true` to enable the scan API
+- `KK_PROBE_SCAN_API_SECRET` environment variable — value matched against the `X-Probe-Secret` header; authentication for requests from the KrakenKey API (`KK_PROBE_SCAN_SECRET` env var on the API side must match)
+- `ScanAPIConfig` struct in probe configuration
+
+[0.2.0]: https://github.com/krakenkey/probe/compare/v0.1.0...v0.2.0
+
 ## [0.1.0] - 2026-03-17
 
 ### Added