diff --git a/.changelog/842.trivial.md b/.changelog/842.trivial.md
deleted file mode 100644
index e69de29bb..000000000
diff --git a/.changelog/849.bugfix.md b/.changelog/849.bugfix.md
deleted file mode 100644
index df81f2485..000000000
--- a/.changelog/849.bugfix.md
+++ /dev/null
@@ -1,4 +0,0 @@
-API: Return CORS headers on request timeouts
-
-Moved `CorsMiddleware` outside of `TimeoutHandler` to ensure CORS headers are
-included in responses even when requests time out.
diff --git a/.punch_version.py b/.punch_version.py
index dc48a7490..19ed16206 100644
--- a/.punch_version.py
+++ b/.punch_version.py
@@ -1,3 +1,3 @@
 major = 0
 minor = 5
-patch = 1
+patch = 2
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 0dacf7943..739367701 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -12,6 +12,16 @@ The format is inspired by [Keep a Changelog].
 
 <!-- TOWNCRIER -->
 
+## 0.5.2 (2024-12-23)
+
+### Bug Fixes and Improvements
+
+- API: Return CORS headers on request timeouts
+  ([#849](https://github.com/oasisprotocol/nexus/issues/849))
+
+  Moved `CorsMiddleware` outside of `TimeoutHandler` to ensure CORS headers are
+  included in responses even when requests time out.
+
 ## 0.5.1 (2024-12-19)
 
 ### Features