diff --git a/CHANGELOG.md b/CHANGELOG.md
index 9647285..fae7c0b 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -163,6 +163,10 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
   `harness/_build/html/reports/broken.err.log`. Also recorded in the workflow header that
   "Re-run failed jobs" can never go green on this harness — it bumps `run_attempt`, and so the
   cache salt, without re-running the seed jobs that saved under the old salt. (#116)
+- **publish-gh-pages**: `softprops/action-gh-release` moved to v3.0.2, SHA-pinned as
+  `3d0d9888cb7fd7b750713d6e236d1fcb99157228`. Recorded retrospectively — it shipped in v0.10.0
+  with no entry at the time, which left the v0.9.0 note about v3.0.1 (#94) as the file's last word
+  on the pin while the code had moved past it. (#101)
 
 ### Fixed
 - **build-lectures**: on hosted (non-container) runners, a **successful build failed the step