diff --git a/CHANGELOG.md b/CHANGELOG.md
index d3c21b5..348c47d 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -4,6 +4,12 @@ All notable changes to this project will be documented in this file.
 
 ## [Unreleased]
 
+## [0.10.1] — 2026-10-28
+
+Patch release: opencode now counts and prices non-cached input tokens for
+Cursor models (#146), dependencies move past the open security advisories,
+and per-model costs follow Cursor's 2026-10-27 published data.
+
 ### Fixed
 
 - **Non-cached input tokens now reach opencode (#146).** Cursor's
diff --git a/package-lock.json b/package-lock.json
index ba0050f..44dae25 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -1,12 +1,12 @@
 {
   "name": "@stablekernel/opencode-cursor",
-  "version": "0.10.0",
+  "version": "0.10.1",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@stablekernel/opencode-cursor",
-      "version": "0.10.0",
+      "version": "0.10.1",
       "license": "MIT",
       "dependencies": {
         "@connectrpc/connect-node": "^2.3.0",
diff --git a/package.json b/package.json
index f735123..72fce8d 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@stablekernel/opencode-cursor",
-  "version": "0.10.0",
+  "version": "0.10.1",
   "description": "opencode provider plugin backed by the official Cursor SDK (@cursor/sdk) — adds a Cursor provider and lists its models",
   "type": "module",
   "license": "MIT",