diff --git a/CHANGELOG.md b/CHANGELOG.md
index 2f6380b..dd8437f 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -12,6 +12,15 @@ the canonical names; short forms are listed in `cmd/kensa/flags.go`.
 
 ## Unreleased
 
+(no changes yet)
+
+## v0.4.2 — 2026-06-14
+
+Per-rule OSCAL export + an unmapped-rule conformance fix, prompted by the
+OpenWatch team's per-rule-expansion question. PATCH bump: the addition
+lives on `pkg/kensa` and the fix is in `internal/evidence`; the frozen
+`api/` surface is untouched.
+
 ### Added
 
 - **Per-rule OSCAL export on `pkg/kensa`** — `ExportOSCALOutcome` /
diff --git a/VERSION b/VERSION
index 267577d..2b7c5ae 100644
--- a/VERSION
+++ b/VERSION
@@ -1 +1 @@
-0.4.1
+0.4.2