diff --git a/CHANGELOG.md b/CHANGELOG.md
index 23b2fbc..995aa20 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,5 +1,12 @@
 # Changelog
 
+## [2.1.8](https://github.com/electronicarts/helmci/compare/v2.1.7...v2.1.8) (2026-07-16)
+
+
+### Bug Fixes
+
+* update cmov from 0.5.3 to 0.5.4 to fix GHSA-3rjw-m598-pq24 ([50ca1a9](https://github.com/electronicarts/helmci/commit/50ca1a9565263b3ebd6ce22c3f072cc7eb2d6ed1))
+
 ## [2.1.7](https://github.com/electronicarts/helmci/compare/v2.1.6...v2.1.7) (2026-06-26)
 
 
diff --git a/Cargo.lock b/Cargo.lock
index e4426ac..f11e350 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -1683,7 +1683,7 @@ checksum = "2304e00983f87ffb38b55b444b5e3b60a884b5d30c0fca7d82fe33449bbe55ea"
 
 [[package]]
 name = "helmci"
-version = "2.1.7"
+version = "2.1.8"
 dependencies = [
  "anyhow",
  "astral-tokio-tar",
diff --git a/Cargo.toml b/Cargo.toml
index 61f0ca0..b944d88 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "helmci"
-version = "2.1.7"
+version = "2.1.8"
 edition = "2024"
 
 # See more keys and their definitions at https://doc.rust-lang.org/cargo/reference/manifest.html