diff --git a/.release-please-manifest.json b/.release-please-manifest.json
index 218393f..4cff5b9 100644
--- a/.release-please-manifest.json
+++ b/.release-please-manifest.json
@@ -1,3 +1,3 @@
 {
-  ".": "0.4.1"
+  ".": "0.4.2"
 }
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 4f8dacd..1fc0215 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,5 +1,16 @@
 # Changelog
 
+## [0.4.2](https://github.com/wadahiro/scim-server/compare/v0.4.1...v0.4.2) (2026-06-13)
+
+
+### Bug Fixes
+
+* **sqlite:** create the database file automatically — a file URL like `sqlite:/data/scim.db` no longer needs `?mode=rwc` ([#65](https://github.com/wadahiro/scim-server/pull/65))
+
+### Build System
+
+* Build the published container image from the exact released binary (single source of truth) via one multi-target Dockerfile, and slim the runtime to distroless/base-nossl (~12 MB smaller) ([#64](https://github.com/wadahiro/scim-server/pull/64))
+
 ## [0.4.1](https://github.com/wadahiro/scim-server/compare/v0.4.0...v0.4.1) (2026-06-13)
 
 ### Bug Fixes
diff --git a/Cargo.lock b/Cargo.lock
index b9fbcfd..314c503 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -2637,7 +2637,7 @@ dependencies = [
 
 [[package]]
 name = "scim-server"
-version = "0.4.1"
+version = "0.4.2"
 dependencies = [
  "argon2",
  "async-trait",
diff --git a/Cargo.toml b/Cargo.toml
index f11e2dc..ca4d617 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "scim-server"
-version = "0.4.1"
+version = "0.4.2"
 edition = "2021"
 # Application binary, not a library — never publish to crates.io. This also
 # tells release-plz to manage version/changelog/tags without publishing.