diff --git a/CHANGELOG.md b/CHANGELOG.md
index 6dfc816..509d5d1 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -4,14 +4,14 @@ All notable changes to this project will be documented in this file.
 
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/).
 
-## [0.2.1] - 2026-03-31
+## [0.2.2] - 2026-03-31
 
 ### Fixed
-- FIDO2 key generation on macOS — use Homebrew's `ssh-keygen` binary which has built-in FIDO2 support, instead of searching for the removed `libsk-libfido2.dylib` middleware
+- FIDO2 key generation on macOS — detect Homebrew's openssh via `ssh-sk-helper` (no freeze), use its `ssh-keygen` binary for hardware key generation
 - Linux gitleaks install hint now shows `apt`/`dnf` instead of `brew`
 
 ### Changed
-- Group interactive apply prompts by category (6 groups instead of ~25 individual prompts), each showing a table of pending changes with one-line explanations
+- Group interactive apply prompts into 6 categories with one-line explanations (replaces ~25 individual prompts)
 
 ## [0.2.0] - 2026-03-31
 
diff --git a/git-harden.sh b/git-harden.sh
index fdad8e5..ce89312 100755
--- a/git-harden.sh
+++ b/git-harden.sh
@@ -10,7 +10,7 @@ IFS=$'\n\t'
 # ------------------------------------------------------------------------------
 # Constants
 # ------------------------------------------------------------------------------
-readonly VERSION="0.2.1"
+readonly VERSION="0.2.2"
 readonly BACKUP_DIR="${HOME}/.config/git"
 readonly HOOKS_DIR="${HOME}/.config/git/hooks"
 readonly ALLOWED_SIGNERS_FILE="${HOME}/.config/git/allowed_signers"
diff --git a/test/git-harden.bats b/test/git-harden.bats
index f13a8a6..d6b1ba3 100755
--- a/test/git-harden.bats
+++ b/test/git-harden.bats
@@ -1148,7 +1148,7 @@ EOF
 # v0.2.0: Version bump
 # ===========================================================================
 
-@test "--version reports 0.2.1" {
+@test "--version reports 0.2.2" {
     run bash "$SCRIPT" --version
-    assert_output --partial "0.2.1"
+    assert_output --partial "0.2.2"
 }