From b0038cfe776f72ef248886ead11dd8cfc18773bf Mon Sep 17 00:00:00 2001
From: Vasil <kulakov@vasiliy.pro>
Date: Mon, 26 Oct 2026 19:16:56 +0100
Subject: [PATCH] chore(release): 1.1.1

---
 CHANGELOG.md | 2 ++
 SECURITY.md  | 2 +-
 2 files changed, 3 insertions(+), 1 deletion(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 7fd032c..2141e08 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -6,6 +6,8 @@ Notable changes to ktms-admin. The format follows
 
 ## [Unreleased]
 
+## [1.1.1] - 2026-10-26
+
 ### Security
 - The image is built on Alpine 3.23 with `ca-certificates` 20261020 or newer, which no longer
   trusts the eMudhra intermediates whose keys leaked in October 2026, and with Go 1.27.3.
diff --git a/SECURITY.md b/SECURITY.md
index 1fa9c36..875ed31 100644
--- a/SECURITY.md
+++ b/SECURITY.md
@@ -19,7 +19,7 @@ From 1.0.0 on, images are signed with keyless [Sigstore cosign](https://docs.sig
 SBOM and SLSA provenance. Use cosign 3 and pin the identity to the tag you verify:
 
 ```bash
-V=v1.1.0
+V=v1.1.1
 cosign verify coyl/ktms-admin:${V#v} \
   --certificate-identity "https://github.com/ai-process/ktms-admin/.github/workflows/docker-publish.yml@refs/tags/$V" \
   --certificate-oidc-issuer https://token.actions.githubusercontent.com