From d3c45759786a8770ff53556817ed3f8a38bc6243 Mon Sep 17 00:00:00 2001
From: rldyourmnd <danil@nddev.it.com>
Date: Thu, 3 Sep 2026 00:26:28 +0500
Subject: [PATCH] chore(release): prepare ci-workflows 0.1.16

Signed-off-by: rldyourmnd <danil@nddev.it.com>
---
 CHANGELOG.md | 6 ++++++
 VERSION      | 2 +-
 2 files changed, 7 insertions(+), 1 deletion(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index fd2b242..fde3127 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -7,6 +7,12 @@ The project follows Semantic Versioning.
 
 ## [Unreleased]
 
+## [0.1.16] - 2026-09-02
+
+- `security-bundle` authenticates its exact called-workflow source fetch with
+  the job token, so a shared fleet egress address cannot exhaust GitHub's
+  anonymous allowance and stop the gate before any scanner runs.
+
 ## [0.1.15] - 2026-08-31
 
 - `docker-build.yml`: reusable BuildKit image build whose layer cache
diff --git a/VERSION b/VERSION
index 71d6a66..e8e277f 100644
--- a/VERSION
+++ b/VERSION
@@ -1 +1 @@
-0.1.14
+0.1.16