diff --git a/.changeset/bump-rustls-webpki.md b/.changeset/bump-rustls-webpki.md
deleted file mode 100644
index 1cd2718..0000000
--- a/.changeset/bump-rustls-webpki.md
+++ /dev/null
@@ -1,11 +0,0 @@
----
-"postagent": patch
-"postagent-darwin-arm64": patch
-"postagent-darwin-x64": patch
-"postagent-linux-arm64-gnu": patch
-"postagent-linux-x64-gnu": patch
----
-
-chore(deps): bump `rustls-webpki` from 0.103.10 to 0.103.13.
-
-Pulls in three upstream security fixes flagged by Dependabot: a high-severity DoS via panic on malformed CRL BIT STRING (GHSA in `< 0.103.13`), and two low-severity name-constraint bypasses (GHSAs in `< 0.103.12`). `rustls-webpki` is a transitive dependency of `rustls`, so this is a `Cargo.lock`-only patch with no API change.
diff --git a/packages/postagent-core/Cargo.lock b/packages/postagent-core/Cargo.lock
index 71ab3d1..6ed02bf 100644
--- a/packages/postagent-core/Cargo.lock
+++ b/packages/postagent-core/Cargo.lock
@@ -934,7 +934,7 @@ checksum = "a89322df9ebe1c1578d689c92318e070967d1042b512afbe49518723f4e6d5cd"
 
 [[package]]
 name = "postagent-core"
-version = "0.3.2"
+version = "0.3.3"
 dependencies = [
  "base64",
  "chrono",
diff --git a/packages/postagent-core/Cargo.toml b/packages/postagent-core/Cargo.toml
index 1995961..a755515 100644
--- a/packages/postagent-core/Cargo.toml
+++ b/packages/postagent-core/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "postagent-core"
-version = "0.3.2"
+version = "0.3.3"
 edition = "2021"
 
 [[bin]]
diff --git a/packages/postagent-darwin-arm64/CHANGELOG.md b/packages/postagent-darwin-arm64/CHANGELOG.md
index 0c2a750..40b4686 100644
--- a/packages/postagent-darwin-arm64/CHANGELOG.md
+++ b/packages/postagent-darwin-arm64/CHANGELOG.md
@@ -1,5 +1,11 @@
 # postagent-darwin-arm64
 
+## 0.3.3
+
+### Patch Changes
+
+- [#29](https://github.com/actionbook/postagent/pull/29) [`1d14401`](https://github.com/actionbook/postagent/commit/1d144016216a2c535679e90818bfc830a932b454) Thanks [@4bmis](https://github.com/4bmis)! - Apply upstream security fixes to bundled TLS dependencies.
+
 ## 0.3.2
 
 ### Patch Changes
diff --git a/packages/postagent-darwin-arm64/package.json b/packages/postagent-darwin-arm64/package.json
index e0c4c69..b5fd116 100644
--- a/packages/postagent-darwin-arm64/package.json
+++ b/packages/postagent-darwin-arm64/package.json
@@ -1,6 +1,6 @@
 {
   "name": "postagent-darwin-arm64",
-  "version": "0.3.2",
+  "version": "0.3.3",
   "description": "Postagent CLI native binary for macOS ARM64",
   "os": [
     "darwin"
diff --git a/packages/postagent-darwin-x64/CHANGELOG.md b/packages/postagent-darwin-x64/CHANGELOG.md
index f7a786e..d4fce16 100644
--- a/packages/postagent-darwin-x64/CHANGELOG.md
+++ b/packages/postagent-darwin-x64/CHANGELOG.md
@@ -1,5 +1,11 @@
 # postagent-darwin-x64
 
+## 0.3.3
+
+### Patch Changes
+
+- [#29](https://github.com/actionbook/postagent/pull/29) [`1d14401`](https://github.com/actionbook/postagent/commit/1d144016216a2c535679e90818bfc830a932b454) Thanks [@4bmis](https://github.com/4bmis)! - Apply upstream security fixes to bundled TLS dependencies.
+
 ## 0.3.2
 
 ### Patch Changes
diff --git a/packages/postagent-darwin-x64/package.json b/packages/postagent-darwin-x64/package.json
index 5676b24..d19294b 100644
--- a/packages/postagent-darwin-x64/package.json
+++ b/packages/postagent-darwin-x64/package.json
@@ -1,6 +1,6 @@
 {
   "name": "postagent-darwin-x64",
-  "version": "0.3.2",
+  "version": "0.3.3",
   "description": "Postagent CLI native binary for macOS x64",
   "os": [
     "darwin"
diff --git a/packages/postagent-linux-arm64-gnu/CHANGELOG.md b/packages/postagent-linux-arm64-gnu/CHANGELOG.md
index 30c676d..e113586 100644
--- a/packages/postagent-linux-arm64-gnu/CHANGELOG.md
+++ b/packages/postagent-linux-arm64-gnu/CHANGELOG.md
@@ -1,5 +1,11 @@
 # postagent-linux-arm64-gnu
 
+## 0.3.3
+
+### Patch Changes
+
+- [#29](https://github.com/actionbook/postagent/pull/29) [`1d14401`](https://github.com/actionbook/postagent/commit/1d144016216a2c535679e90818bfc830a932b454) Thanks [@4bmis](https://github.com/4bmis)! - Apply upstream security fixes to bundled TLS dependencies.
+
 ## 0.3.2
 
 ### Patch Changes
diff --git a/packages/postagent-linux-arm64-gnu/package.json b/packages/postagent-linux-arm64-gnu/package.json
index 677c614..ca5b684 100644
--- a/packages/postagent-linux-arm64-gnu/package.json
+++ b/packages/postagent-linux-arm64-gnu/package.json
@@ -1,6 +1,6 @@
 {
   "name": "postagent-linux-arm64-gnu",
-  "version": "0.3.2",
+  "version": "0.3.3",
   "description": "Postagent CLI native binary for Linux ARM64 (glibc)",
   "os": [
     "linux"
diff --git a/packages/postagent-linux-x64-gnu/CHANGELOG.md b/packages/postagent-linux-x64-gnu/CHANGELOG.md
index 9d89ffe..3c7846d 100644
--- a/packages/postagent-linux-x64-gnu/CHANGELOG.md
+++ b/packages/postagent-linux-x64-gnu/CHANGELOG.md
@@ -1,5 +1,11 @@
 # postagent-linux-x64-gnu
 
+## 0.3.3
+
+### Patch Changes
+
+- [#29](https://github.com/actionbook/postagent/pull/29) [`1d14401`](https://github.com/actionbook/postagent/commit/1d144016216a2c535679e90818bfc830a932b454) Thanks [@4bmis](https://github.com/4bmis)! - Apply upstream security fixes to bundled TLS dependencies.
+
 ## 0.3.2
 
 ### Patch Changes
diff --git a/packages/postagent-linux-x64-gnu/package.json b/packages/postagent-linux-x64-gnu/package.json
index 95bc390..ca45313 100644
--- a/packages/postagent-linux-x64-gnu/package.json
+++ b/packages/postagent-linux-x64-gnu/package.json
@@ -1,6 +1,6 @@
 {
   "name": "postagent-linux-x64-gnu",
-  "version": "0.3.2",
+  "version": "0.3.3",
   "description": "Postagent CLI native binary for Linux x64 (glibc)",
   "os": [
     "linux"
diff --git a/packages/postagent/CHANGELOG.md b/packages/postagent/CHANGELOG.md
index 8db4d41..ba4a31a 100644
--- a/packages/postagent/CHANGELOG.md
+++ b/packages/postagent/CHANGELOG.md
@@ -1,5 +1,11 @@
 # postagent
 
+## 0.3.3
+
+### Patch Changes
+
+- [#29](https://github.com/actionbook/postagent/pull/29) [`1d14401`](https://github.com/actionbook/postagent/commit/1d144016216a2c535679e90818bfc830a932b454) Thanks [@4bmis](https://github.com/4bmis)! - Apply upstream security fixes to bundled TLS dependencies.
+
 ## 0.3.2
 
 ### Patch Changes
diff --git a/packages/postagent/package.json b/packages/postagent/package.json
index a332bef..fee77d3 100644
--- a/packages/postagent/package.json
+++ b/packages/postagent/package.json
@@ -1,6 +1,6 @@
 {
   "name": "postagent",
-  "version": "0.3.2",
+  "version": "0.3.3",
   "description": "CLI collection tool for agents",
   "type": "module",
   "bin": {