diff --git a/CHANGELOG.md b/CHANGELOG.md
index b281300..d8a944e 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -2,6 +2,15 @@
 
 All notable changes to this project will be documented in this file. See [standard-version](https://github.com/conventional-changelog/standard-version) for commit guidelines.
 
+## [0.2.9](https://github.com/remarkablemark/inline-style-parser/compare/v0.2.8...v0.2.9) (2026-07-06)
+
+
+### Bug Fixes
+
+* parse unquoted `url()` values containing semicolons ([a7b60ad](https://github.com/remarkablemark/inline-style-parser/commit/a7b60adc0f67d09c23c70e8d7e5d5bb6961fd435))
+* prevent ReDoS in `COMMENT_REGEX` with unambiguous alternation ([eb7d005](https://github.com/remarkablemark/inline-style-parser/commit/eb7d005ec951b47f20e3a6b4df99007be50741fa))
+* replace `COMMENT_REGEX` to prevent ReDoS vulnerability ([a3cf4a5](https://github.com/remarkablemark/inline-style-parser/commit/a3cf4a5bf7f51f9ceb8283b0181baa3b7cf4a813))
+
 ## [0.2.8](https://github.com/remarkablemark/inline-style-parser/compare/v0.2.7...v0.2.8) (2026-07-03)
 
 
diff --git a/package-lock.json b/package-lock.json
index 074d502..aa224f6 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -1,12 +1,12 @@
 {
   "name": "inline-style-parser",
-  "version": "0.2.8",
+  "version": "0.2.9",
   "lockfileVersion": 2,
   "requires": true,
   "packages": {
     "": {
       "name": "inline-style-parser",
-      "version": "0.2.8",
+      "version": "0.2.9",
       "license": "MIT",
       "devDependencies": {
         "@commitlint/cli": "21.2.0",
diff --git a/package.json b/package.json
index d826cbc..1714c5a 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "inline-style-parser",
-  "version": "0.2.8",
+  "version": "0.2.9",
   "description": "An inline style parser.",
   "main": "./cjs/index.js",
   "module": "./esm/index.mjs",