diff --git a/CHANGELOG.md b/CHANGELOG.md
index 746bedc..0d39536 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -2,6 +2,23 @@
 
 ## Unreleased
 
+## 0.0.3
+
+### Added
+
+- `envsitter_validate`: validate dotenv syntax (issues only; never values).
+- `envsitter_copy`: copy keys between dotenv files (dry-run unless `write: true`; never values).
+- `envsitter_format` / `envsitter_reorder`: format/reorder dotenv files (dry-run unless `write: true`; never values).
+- `envsitter_annotate`: annotate dotenv keys with comments (dry-run unless `write: true`; never values).
+
+### Changed
+
+- `envsitter_match`: uses EnvSitter outside-in matching for `op: "is_equal"`.
+- Block warnings: removed prompt append (toast-only) to avoid writing into OpenCode's input.
+- Bumped `envsitter` dependency to `^0.0.3`.
+
+## 0.0.2
+
 ### Added
 
 - `envsitter_match`: safe boolean matching for `.env` keys (single key, bulk keys, or all keys) with support for the EnvSitter match operators.
diff --git a/package-lock.json b/package-lock.json
index 252e66c..6cbaa46 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -1,12 +1,12 @@
 {
   "name": "envsitter-guard",
-  "version": "0.0.2",
+  "version": "0.0.3",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "envsitter-guard",
-      "version": "0.0.2",
+      "version": "0.0.3",
       "license": "MIT",
       "dependencies": {
         "@opencode-ai/plugin": "^1.1.14",
diff --git a/package.json b/package.json
index 9b871be..3e42158 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "envsitter-guard",
-  "version": "0.0.2",
+  "version": "0.0.3",
   "description": "OpenCode plugin that prevents agents/tools from reading or editing sensitive .env* files, while still allowing safe inspection via EnvSitter.",
   "license": "MIT",
   "type": "module",