diff --git a/.release-please-manifest.json b/.release-please-manifest.json
index db2216d..0463eef 100644
--- a/.release-please-manifest.json
+++ b/.release-please-manifest.json
@@ -1,4 +1,4 @@
 {
-  ".": "0.10.2",
-  "packages/cli": "0.10.2"
+  ".": "0.10.3",
+  "packages/cli": "0.10.3"
 }
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 5961f3f..64d12b9 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,5 +1,18 @@
 # Changelog
 
+## [0.10.3](https://github.com/theagenticguy/opencodehub/compare/root-v0.10.2...root-v0.10.3) (2026-06-29)
+
+
+### Features
+
+* **frameworks:** wire stage-3 config-AST evidence into detection ([#264](https://github.com/theagenticguy/opencodehub/issues/264)) ([18e08b2](https://github.com/theagenticguy/opencodehub/commit/18e08b213b8c3dd6f216b715318bb1185066c841))
+* **pack:** context-bom read-receipt (9th BOM item) + real production provenance ([#261](https://github.com/theagenticguy/opencodehub/issues/261)) ([b936af2](https://github.com/theagenticguy/opencodehub/commit/b936af25ec531fc021b6a54fc4c4419203e6a8e3))
+
+
+### Bug Fixes
+
+* wire four dropped injection seams (F1–F4 from the latent-bug sweep) ([#263](https://github.com/theagenticguy/opencodehub/issues/263)) ([dde590e](https://github.com/theagenticguy/opencodehub/commit/dde590ed32eac79a2121f2ba8341351b0c83d3ac))
+
 ## [0.10.2](https://github.com/theagenticguy/opencodehub/compare/root-v0.10.1...root-v0.10.2) (2026-06-28)
 
 
diff --git a/package.json b/package.json
index 16d9f6f..ff4a18b 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "opencodehub-monorepo",
-  "version": "0.10.2",
+  "version": "0.10.3",
   "private": true,
   "description": "OpenCodeHub — Apache-2.0 code intelligence graph + MCP server for AI coding agents",
   "license": "Apache-2.0",
diff --git a/packages/cli/CHANGELOG.md b/packages/cli/CHANGELOG.md
index e74e0b1..efbd6fa 100644
--- a/packages/cli/CHANGELOG.md
+++ b/packages/cli/CHANGELOG.md
@@ -1,5 +1,17 @@
 # Changelog
 
+## [0.10.3](https://github.com/theagenticguy/opencodehub/compare/cli-v0.10.2...cli-v0.10.3) (2026-06-29)
+
+
+### Features
+
+* **pack:** context-bom read-receipt (9th BOM item) + real production provenance ([#261](https://github.com/theagenticguy/opencodehub/issues/261)) ([b936af2](https://github.com/theagenticguy/opencodehub/commit/b936af25ec531fc021b6a54fc4c4419203e6a8e3))
+
+
+### Bug Fixes
+
+* wire four dropped injection seams (F1–F4 from the latent-bug sweep) ([#263](https://github.com/theagenticguy/opencodehub/issues/263)) ([dde590e](https://github.com/theagenticguy/opencodehub/commit/dde590ed32eac79a2121f2ba8341351b0c83d3ac))
+
 ## [0.10.2](https://github.com/theagenticguy/opencodehub/compare/cli-v0.10.1...cli-v0.10.2) (2026-06-28)
 
 
diff --git a/packages/cli/package.json b/packages/cli/package.json
index ab86a40..df71197 100644
--- a/packages/cli/package.json
+++ b/packages/cli/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@opencodehub/cli",
-  "version": "0.10.2",
+  "version": "0.10.3",
   "description": "OpenCodeHub — codehub CLI (analyze, setup, mcp, list, status, clean, query, context, impact, sql)",
   "license": "Apache-2.0",
   "repository": {