diff --git a/changelog/index.mdx b/changelog/index.mdx
index 2d68b1d..6587853 100644
--- a/changelog/index.mdx
+++ b/changelog/index.mdx
@@ -4,6 +4,45 @@ description: "Release notes for Kosli products."
rss: true
---
+
+
+## Bug fixes
+
+- **GitHub PR attestation reliability** — `kosli attest pullrequest github` and `kosli assert pullrequest github` now correctly detect pull requests merged seconds before CI runs. The CLI falls back to a REST + per-PR GraphQL lookup when GitHub's GraphQL `associatedPullRequests` returns no results due to eventual consistency, with retries up to 60 seconds.
+
+## Updates
+
+- Improved help text for `kosli attest artifact` to clarify that `--repo-id`, `--repo-url`, and `--repository` must be set together, and which CI systems set them automatically. See the [attest artifact](/client_reference/kosli_attest_artifact) reference.
+
+[View on GitHub](https://github.com/kosli-dev/cli/releases/tag/v2.17.1)
+
+
+
+
+
+## Bug fixes
+
+- Bumped `hc-install` to v0.9.4 to use the renewed HashiCorp GPG key, restoring provider installation in environments that verify the key.
+
+[View on GitHub](https://github.com/kosli-dev/terraform-provider-kosli/releases/tag/v0.6.1)
+
+
+
+
+
+## New features
+
+- **Automatic update notifications** — the CLI now checks for available updates after each command and prints a notice to stderr when a newer version is released. Notices are suppressed in debug mode and for commands with programmatic output (e.g. `--output json`).
+- **`kosli --version` enhancements** — `kosli --version` now prints the full version struct and shows an update notice when a newer version is available.
+
+## Bug fixes
+
+- Attestation `--name` validation now rejects names with a leading dot (e.g. `.foo`), trailing dot, or more than one dot (e.g. `foo.bar.baz`) with a clear error message instead of silently mishandling them.
+
+[View on GitHub](https://github.com/kosli-dev/cli/releases/tag/v2.17.0)
+
+
+
## New features