diff --git a/CHANGELOG.md b/CHANGELOG.md
index e74c8ba..936ae1e 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,5 +1,13 @@
+## Unreleased
 ### Breaking Changes
 ### Added
+### Fixed
+
+## 0.4.2 - 2025-02-18
+
+### Added
+- Verify checksums of packages when using vendoring functions.
+
 ### Fixed
 - A more thorough fix for repositories that have packages for multiple architectures in the same repository.
   - Packages are filtered by base architecture, and the architecture of a package is now stored in the lockfile
diff --git a/Cargo.lock b/Cargo.lock
index 1716ed5..bc14891 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -1954,7 +1954,7 @@ dependencies = [
 
 [[package]]
 name = "rpmoci"
-version = "0.4.1"
+version = "0.4.2"
 dependencies = [
  "anyhow",
  "chrono",
diff --git a/Cargo.toml b/Cargo.toml
index eecc01b..b3456ba 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "rpmoci"
-version = "0.4.1"
+version = "0.4.2"
 edition = "2021"
 description = "Build container images from RPMs"
 # rpmoci uses DNF (via pyo3) which is GPLV2+ licensed,