diff --git a/.release-please-manifest.json b/.release-please-manifest.json
index d4f6f299..d6f54056 100644
--- a/.release-please-manifest.json
+++ b/.release-please-manifest.json
@@ -1,3 +1,3 @@
 {
-  ".": "3.0.0"
+  ".": "3.0.1"
 }
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 202bad66..efaf1eb8 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -5,6 +5,19 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [3.0.1](https://github.com/klodr/gmail-mcp/compare/v3.0.0...v3.0.1) (2026-11-02)
+
+
+### Fixed
+
+* **deps:** clear the OSV findings published since 2026-10-23 ([#349](https://github.com/klodr/gmail-mcp/issues/349)) ([ee12b5f](https://github.com/klodr/gmail-mcp/commit/ee12b5fd2cff4449fa3f05c7b2842c38246f25dc))
+* **search:** state zero matches instead of returning an empty text ([#357](https://github.com/klodr/gmail-mcp/issues/357)) ([ed1e778](https://github.com/klodr/gmail-mcp/commit/ed1e7785c3cbc285e6b8904901e187b97d729da2)), closes [#345](https://github.com/klodr/gmail-mcp/issues/345)
+
+
+### Changed
+
+* **bundle:** skip the Codecov upload on PRs from forks ([#356](https://github.com/klodr/gmail-mcp/issues/356)) ([feb557d](https://github.com/klodr/gmail-mcp/commit/feb557dd9b1419b0c37cc0e17c60d61e9bc706f4))
+
 ## [3.0.0](https://github.com/klodr/gmail-mcp/compare/v2.0.3...v3.0.0) (2026-10-23)
 
 
diff --git a/package-lock.json b/package-lock.json
index 61df1c9c..679f61fd 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -1,12 +1,12 @@
 {
   "name": "@klodr/gmail-mcp",
-  "version": "3.0.0",
+  "version": "3.0.1",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@klodr/gmail-mcp",
-      "version": "3.0.0",
+      "version": "3.0.1",
       "license": "MIT",
       "dependencies": {
         "@modelcontextprotocol/sdk": "^1.32.1",
diff --git a/package.json b/package.json
index 2c0829f1..36a8c39b 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@klodr/gmail-mcp",
-  "version": "3.0.0",
+  "version": "3.0.1",
   "description": "Gmail MCP server — scope-gated tools + attachment/download path jails + supply-chain hardening. Fork of GongRzhe/Gmail-MCP-Server via ArtyMcLabin's intermediate fork.",
   "type": "module",
   "main": "dist/index.js",
diff --git a/server.json b/server.json
index 6d0e98bb..6829b82a 100644
--- a/server.json
+++ b/server.json
@@ -2,7 +2,7 @@
   "$schema": "https://static.modelcontextprotocol.io/schemas/2025-09-29/server.schema.json",
   "name": "io.github.klodr/gmail-mcp",
   "description": "Gmail MCP server — scope-gated tools (read-only / send-only / modify) with attachment and download path jails, OAuth credentials hardened to 0o600, supply-chain hardening (Sigstore attestations + SPDX/CycloneDX SBOMs + npm provenance).",
-  "version": "3.0.0",
+  "version": "3.0.1",
   "repository": {
     "url": "https://github.com/klodr/gmail-mcp",
     "source": "github"
@@ -11,7 +11,7 @@
     {
       "registryType": "npm",
       "identifier": "@klodr/gmail-mcp",
-      "version": "3.0.0",
+      "version": "3.0.1",
       "transport": {
         "type": "stdio"
       },
diff --git a/src/server.ts b/src/server.ts
index 3634dd01..7f09e5cd 100644
--- a/src/server.ts
+++ b/src/server.ts
@@ -29,7 +29,7 @@ import {
 // Mirrors the same convention used in
 // klodr/mercury-invoicing-mcp/src/server.ts:VERSION and
 // klodr/faxdrop-mcp/src/server.ts:VERSION.
-export const VERSION = "3.0.0"; // x-release-please-version
+export const VERSION = "3.0.1"; // x-release-please-version
 
 export interface ServerOptions {
   /**