diff --git a/.github/workflows/build-publish.yml b/.github/workflows/build-publish.yml
index 1972bfa..abaeb00 100644
--- a/.github/workflows/build-publish.yml
+++ b/.github/workflows/build-publish.yml
@@ -59,10 +59,17 @@ jobs:
           path: ./wheelhouse/*.whl
 
   publish:
+    name: Publish to PyPI
+    if: startsWith(github.ref, 'refs/tags/')  # only publish to PyPI on tag pushes
     needs:
       - build-sdist
       - build-wheels
     runs-on: ubuntu-latest
+    environment:
+      name: pypi
+      url: https://pypi.org/p/pe
+    permissions:
+      id-token: write  # IMPORTANT: mandatory for trusted publishing
     steps:
       - name: Download all the dists
         uses: actions/download-artifact@v3
@@ -73,6 +80,3 @@ jobs:
         run: ls -l dist
       - name: Publish
         uses: pypa/gh-action-pypi-publish@release/v1
-        with:
-          user: __token__
-          password: ${{ secrets.PYPI_PASSWORD }}
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 3d32f97..e711175 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -2,10 +2,25 @@
 
 ## [Unreleased][unreleased]
 
+
+## [v0.5.1][]
+
+**Release date: 2023-12-31**
+
+### Python Support
+
+* Added support for Python 3.12
+
 ### Fixed
 
 * Repetitions with mincount > 0 no longer reuse the instruction object ([#38])
 
+### Maintenance
+
+* Use pyproject.toml instead of setup.cfg for project metadata
+* Use Ruff for linting ([#36])
+* Update CI workflows, including OIDC trusted publishing
+
 
 ## [v0.5.0][]
 
@@ -155,6 +170,7 @@ descent parser and a work-in-progress state-machine parser.
 [v0.3.2]: ../../releases/tag/v0.3.2
 [v0.4.0]: ../../releases/tag/v0.4.0
 [v0.5.0]: ../../releases/tag/v0.5.0
+[v0.5.1]: ../../releases/tag/v0.5.1
 
 [#6]: https://github.com/goodmami/pe/issues/6
 [#7]: https://github.com/goodmami/pe/issues/7
@@ -168,4 +184,5 @@ descent parser and a work-in-progress state-machine parser.
 [#21]: https://github.com/goodmami/pe/issues/21
 [#23]: https://github.com/goodmami/pe/issues/23
 [#31]: https://github.com/goodmami/pe/issues/31
+[#36]: https://github.com/goodmami/pe/issues/36
 [#38]: https://github.com/goodmami/pe/issues/38
diff --git a/pe/_meta.py b/pe/_meta.py
index dd94f2e..9e621aa 100644
--- a/pe/_meta.py
+++ b/pe/_meta.py
@@ -2,6 +2,4 @@
 Meta-information about pe.
 """
 
-__version__ = '0.5.0'
-
-# Note: most of this file's contents has moved to setup.cfg
+__version__ = '0.5.1'