diff --git a/CHANGELOG.md b/CHANGELOG.md
index 6f86f26..88ff053 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,12 +1,17 @@
 # Unreleased
 
+
+# 0.2.0 (2026-06-22)
+
 ## Features
-- Config: interpolate host environment variables (`$VAR` / `${VAR}`, `$$` for a
+- Config: Interpolate host environment variables (`$VAR` / `${VAR}`, `$$` for a
   literal `$`) into any config string value. Enables e.g. mounting `$PWD`.
-- Config: simplified the `env` schema. Removed `fromHost`; an env var is now a
+- Config: Simplified the `env` schema. Removed `fromHost`; an env var is now a
   literal string (`$VAR`-interpolated) or an object 
   `{ value?, secret?, injectForHosts? }`, where an omitted `value` reads the 
   host var named like the key. Secrets use `injectForHosts` (was `hosts`).
+- Config: Expose QEMU settings as config options.
+- Add `/docs` folder with preliminary documentation.
 
 
 ## Bug fixes
@@ -17,6 +22,12 @@
   (`.tuor/.state`), which holds internal overlay data rather than user content.
   Persisted overlays can contain dangling symlinks there, so this is also what
   triggered the crash above on subsequent starts. The state dir is now skipped.
+- Bump undici version to fix upstream CVE.
+
+
+## Internal
+- Release automation: Add `prepare-release.ts` and set up GitHub Actions
+  workflow to release & publish.
 
 
 # 0.1.0 (2026-06-15)
diff --git a/package-lock.json b/package-lock.json
index 11f9597..ff7feb8 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -1,12 +1,12 @@
 {
   "name": "tuor-sandbox",
-  "version": "0.1.0",
+  "version": "0.2.0",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "tuor-sandbox",
-      "version": "0.1.0",
+      "version": "0.2.0",
       "license": "Apache-2.0",
       "dependencies": {
         "@earendil-works/gondolin": "^0.12.0",
diff --git a/package.json b/package.json
index 61eff24..cd672e4 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "tuor-sandbox",
-  "version": "0.1.0",
+  "version": "0.2.0",
   "author": "codethief <git@codethief.eu>",
   "license": "Apache-2.0",
   "type": "module",