diff --git a/.release-please-manifest.json b/.release-please-manifest.json
index bc9ea0cf..cacba04d 100644
--- a/.release-please-manifest.json
+++ b/.release-please-manifest.json
@@ -1,4 +1,4 @@
 {
-  ".": "0.42.9",
+  ".": "0.42.10",
   "mcp-package": "0.1.2"
 }
diff --git a/CHANGELOG.md b/CHANGELOG.md
index b446e243..1bb7f07b 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,5 +1,17 @@
 # Changelog
 
+## [0.42.10](https://github.com/grafana/plugin-validator/compare/plugin-validator/v0.42.9...plugin-validator/v0.42.10) (2026-06-22)
+
+
+### 🐛 Bug Fixes
+
+* **security/medium/:** update security tar to v7.5.16 [security] ([#616](https://github.com/grafana/plugin-validator/issues/616)) ([2d11dc6](https://github.com/grafana/plugin-validator/commit/2d11dc6a356cb800d93e857cfe95ee2a20db87ea))
+
+
+### 🔧 Chores
+
+* bump osv-scanner to v2.4.0 and go to 1.26.4 ([#618](https://github.com/grafana/plugin-validator/issues/618)) ([9017a5a](https://github.com/grafana/plugin-validator/commit/9017a5aaf942bce84254bbe06bca92ea53809b96))
+
 ## [0.42.9](https://github.com/grafana/plugin-validator/compare/plugin-validator/v0.42.8...plugin-validator/v0.42.9) (2026-06-10)
 
 
diff --git a/package-lock.json b/package-lock.json
index 13783d5a..205112d6 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -1,12 +1,12 @@
 {
   "name": "@grafana/plugin-validator",
-  "version": "0.42.9",
+  "version": "0.42.10",
   "lockfileVersion": 2,
   "requires": true,
   "packages": {
     "": {
       "name": "@grafana/plugin-validator",
-      "version": "0.42.9",
+      "version": "0.42.10",
       "license": "Apache-2.0",
       "dependencies": {
         "tar": "7.5.16"
diff --git a/package.json b/package.json
index 3e4883b0..f3ead394 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@grafana/plugin-validator",
-  "version": "0.42.9",
+  "version": "0.42.10",
   "description": "Grafana Plugin Validator",
   "main": "index.js",
   "repository": {