diff --git a/.release-please-manifest.json b/.release-please-manifest.json
index 2e84f968..bc9ea0cf 100644
--- a/.release-please-manifest.json
+++ b/.release-please-manifest.json
@@ -1,4 +1,4 @@
 {
-  ".": "0.42.8",
+  ".": "0.42.9",
   "mcp-package": "0.1.2"
 }
diff --git a/CHANGELOG.md b/CHANGELOG.md
index b4836147..b446e243 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,5 +1,18 @@
 # Changelog
 
+## [0.42.9](https://github.com/grafana/plugin-validator/compare/plugin-validator/v0.42.8...plugin-validator/v0.42.9) (2026-06-10)
+
+
+### 🐛 Bug Fixes
+
+* **provenance:** use repo-scoped attestation endpoint ([#612](https://github.com/grafana/plugin-validator/issues/612)) ([79811ac](https://github.com/grafana/plugin-validator/commit/79811ac8489ba6206adcf6135f50301bcae212f9))
+* **release:** guard publish job against duplicate GitHub releases ([#610](https://github.com/grafana/plugin-validator/issues/610)) ([d576630](https://github.com/grafana/plugin-validator/commit/d576630af254e5ec6af3fa71c088a9c4f9b2d3d0))
+
+
+### 🔧 Chores
+
+* **ci:** bump release-please-action to v5.0.0 ([#609](https://github.com/grafana/plugin-validator/issues/609)) ([ee6c419](https://github.com/grafana/plugin-validator/commit/ee6c419edbb7977e360289be2ae4785123b457ac))
+
 ## [0.42.8](https://github.com/grafana/plugin-validator/compare/plugin-validator/v0.42.7...plugin-validator/v0.42.8) (2026-06-08)
 
 
diff --git a/package-lock.json b/package-lock.json
index 9b355325..faa60258 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -1,12 +1,12 @@
 {
   "name": "@grafana/plugin-validator",
-  "version": "0.42.8",
+  "version": "0.42.9",
   "lockfileVersion": 2,
   "requires": true,
   "packages": {
     "": {
       "name": "@grafana/plugin-validator",
-      "version": "0.42.8",
+      "version": "0.42.9",
       "license": "Apache-2.0",
       "dependencies": {
         "tar": "7.5.11"
diff --git a/package.json b/package.json
index 2cf0cabf..74a4418a 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@grafana/plugin-validator",
-  "version": "0.42.8",
+  "version": "0.42.9",
   "description": "Grafana Plugin Validator",
   "main": "index.js",
   "repository": {