diff --git a/CHANGELOG.md b/CHANGELOG.md
index 9bcb1ef5..9afffbfe 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -23,6 +23,11 @@ even though their GitHub Releases are gone.
 
 ## [Unreleased]
 
+## [v0.4.1] - 2026-05-14
+
+Patch release. Pure CI / dependency hygiene — no codeiq pipeline or
+detector behavior changes.
+
 ### Fixed
 
 - `release-darwin.yml` race against `release-go.yml`: bumped poll budget
@@ -35,6 +40,8 @@ even though their GitHub Releases are gone.
 - Routine Dependabot bumps: `github.com/spf13/pflag` 1.0.9 → 1.0.10
   (PR #163), `step-security/harden-runner` 2.19.1 → 2.19.2 (PR #164).
 
+[v0.4.1]: https://github.com/RandomCodeSpace/codeiq/releases/tag/v0.4.1
+
 ## [v0.4.0] - 2026-05-14
 
 First release of the Go-native codeiq after the `/go/` subdirectory