diff --git a/.github/workflows/release-please.yml b/.github/workflows/release-please.yml
index d5a32e5..7aab9ba 100644
--- a/.github/workflows/release-please.yml
+++ b/.github/workflows/release-please.yml
@@ -19,5 +19,6 @@ jobs:
       - name: Run Release Please
         uses: googleapis/release-please-action@45996ed1f6d02564a971a2fa1b5860e934307cf7 # v5.0.0
         with:
+          token: ${{ secrets.RELEASE_TOKEN }}
           config-file: release-please-config.json
           manifest-file: .release-please-manifest.json
diff --git a/.release-please-manifest.json b/.release-please-manifest.json
index 69535c6..461d94a 100644
--- a/.release-please-manifest.json
+++ b/.release-please-manifest.json
@@ -1,3 +1,3 @@
 {
-  ".": "0.2.4"
+  ".": "0.2.5"
 }
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 2617df3..15cbf1d 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,5 +1,12 @@
 # Changelog
 
+## [0.2.5](https://github.com/mathematic-inc/sqlc-gen-sqlx/compare/v0.2.4...v0.2.5) (2026-09-05)
+
+
+### Bug Fixes
+
+* **ci:** Harden release workflows and repository checks ([#38](https://github.com/mathematic-inc/sqlc-gen-sqlx/issues/38)) ([b4f44f8](https://github.com/mathematic-inc/sqlc-gen-sqlx/commit/b4f44f8c542ae16ef62a8f5fa1cd8fd12c3b46fd))
+
 ## [0.2.4](https://github.com/mathematic-inc/sqlc-gen-sqlx/compare/v0.2.3...v0.2.4) (2026-08-27)
 
 
diff --git a/Cargo.lock b/Cargo.lock
index 6c13650..caa3379 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -2306,7 +2306,7 @@ dependencies = [
 
 [[package]]
 name = "sqlc-gen-sqlx"
-version = "0.2.4"
+version = "0.2.5"
 dependencies = [
  "buffa",
  "convert_case",
diff --git a/Cargo.toml b/Cargo.toml
index f8ea25b..832230e 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -4,7 +4,7 @@ name = "sqlc-gen-sqlx"
 # - Remove path dependencies (if any)
 # - Update CHANGELOG.md
 # - Create a v0.2.x tag
-version = "0.2.4"
+version = "0.2.5"
 edition = "2024"
 rust-version = "1.94"
 description = "A sqlc plugin that generates type-safe sqlx Rust code from SQL queries."