diff --git a/tower-http/CHANGELOG.md b/tower-http/CHANGELOG.md
index 89b6802f..8e497059 100644
--- a/tower-http/CHANGELOG.md
+++ b/tower-http/CHANGELOG.md
@@ -9,7 +9,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## Added
 
-- Support `Last-Modified` (and friends) headers in `ServeDir` and `ServeFile` ([#145])
+- None.
 
 ## Changed
 
@@ -21,10 +21,25 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## Fixed
 
-- Set `Vary` header in `Cors` middleware ([#199])
+# 0.2.1 (January 21, 2022)
+
+## Added
+
+- Support `Last-Modified` (and friends) headers in `ServeDir` and `ServeFile` ([#145])
+- Add `AsyncRequireAuthorization::layer` ([#195])
+
+## Fixed
+
+- Fix build error for certain feature sets ([#209])
+- `Cors`: Set `Vary` header ([#199])
+- `ServeDir` and `ServeFile`: Fix potential directory traversal attack due to
+  improper path validation on Windows ([#204])
 
 [#145]: https://github.com/tower-rs/tower-http/pull/145
+[#195]: https://github.com/tower-rs/tower-http/pull/195
 [#199]: https://github.com/tower-rs/tower-http/pull/199
+[#204]: https://github.com/tower-rs/tower-http/pull/204
+[#209]: https://github.com/tower-rs/tower-http/pull/209
 
 # 0.2.0 (December 1, 2021)
 
diff --git a/tower-http/Cargo.toml b/tower-http/Cargo.toml
index 7396fadd..08a7088f 100644
--- a/tower-http/Cargo.toml
+++ b/tower-http/Cargo.toml
@@ -1,7 +1,7 @@
 [package]
 name = "tower-http"
 description = "Tower middleware and utilities for HTTP clients and servers"
-version = "0.2.0"
+version = "0.2.1"
 authors = ["Tower Maintainers <team@tower-rs.com>"]
 edition = "2018"
 license = "MIT"