diff --git a/.release-please-manifest.json b/.release-please-manifest.json
index c4ddc74..53b7bc9 100644
--- a/.release-please-manifest.json
+++ b/.release-please-manifest.json
@@ -1,3 +1,3 @@
 {
-  ".": "1.1.1"
+  ".": "1.1.2"
 }
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 2b69958..751daf1 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -8,6 +8,17 @@ This file is maintained by Release Please from Conventional Commits. Do not manu
 release section; describe user-visible changes in commit messages and edit the generated release
 pull request when additional context is useful.
 
+## [1.1.2](https://github.com/drhdev/github-backup/compare/v1.1.1...v1.1.2) (2026-10-22)
+
+### Security
+
+* restrict release automation credentials to their required consumers and repository, remove unnecessary workflow-token permissions, and ignore local credential artifacts ([2ba78b2](https://github.com/drhdev/github-backup/commit/2ba78b2a33e93590bee21929800aa77c9233ff14))
+
+### Build System
+
+* **deps-dev:** update grouped Python dependencies ([939abdb](https://github.com/drhdev/github-backup/commit/939abdbddc44df26855b30ecb7d556ad887378a5))
+* **deps:** update CodeQL Action to v4.39.1 ([7b4a93b](https://github.com/drhdev/github-backup/commit/7b4a93b219ca9c5fb72f48a62ddb950bd3f6e61b))
+
 ## [1.1.1](https://github.com/drhdev/github-backup/compare/v1.1.0...v1.1.1) (2026-10-22)
 
 
diff --git a/pyproject.toml b/pyproject.toml
index 014987c..1d7b316 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "github-backup"
-version = "1.1.1"
+version = "1.1.2"
 description = "Production backups for GitHub repositories, gists, and optional service data"
 readme = "README.md"
 requires-python = ">=3.11"
diff --git a/uv.lock b/uv.lock
index 3a8323d..ac9524a 100644
--- a/uv.lock
+++ b/uv.lock
@@ -454,7 +454,7 @@ wheels = [
 
 [[package]]
 name = "github-backup"
-version = "1.1.1"
+version = "1.1.2"
 source = { editable = "." }
 
 [package.optional-dependencies]