diff --git a/CHANGELOG.md b/CHANGELOG.md
index 1c191f73..49a2c716 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,7 +3,6 @@
 ## [unreleased]
 ### Added
 - HTTPS listener with certificate/key pair
-- handle lazy-loading "data-src" pattern for embedded videos, by [@mislav](https://codeberg.org/mislav)
 - log_time_format (and READECK_LOG_TIME_FORMAT) configuration option, by [@mislav](https://codeberg.org/mislav)
 - OAuth2 authorization code flow
 - OAuth2 device code flow
@@ -14,8 +13,12 @@
 - Go-Readability v2, by [@mislav](https://codeberg.org/mislav)
 
 ### Improved
+- Handle lazy-loading "data-src" pattern for embedded videos, by [@mislav](https://codeberg.org/mislav)
 - Support CSS units when parsing SVG element dimensions, by [@mislav](https://codeberg.org/mislav)
 - Stop tracking reading progress once it reaches 100%
+- ARIA attributes on forms and messages
+- Better JSON-LD and microdata support in content extraction
+- Split token for password recovery
 
 ### Fixed
 - Reddit content-script, by [@linsui](https://codeberg.org/linsui)
@@ -25,6 +28,8 @@
 - Layout but with modal image button on small images
 - Readability: avoid unwrapping meaningful HTML elements, by [@mislav](https://codeberg.org/mislav)
 - Sync API date selection with SQLite
+- Retrieve label with zero width joiner (ie. compound emojis)
+- Content Script for arstechnica (com and co.uk)
 
 ## [0.20.4] - 2025-10-18
 ### Changed
diff --git a/Makefile b/Makefile
index cbfb9f05..5ea63cee 100644
--- a/Makefile
+++ b/Makefile
@@ -32,8 +32,8 @@ export GOARCH?=
 SITECONFIG_SRC=./ftr-site-config
 SITECONFIG_DEST=pkg/extract/contentscripts/assets/site-config
 
-GOLANGCI_PKG ?= github.com/golangci/golangci-lint/v2/cmd/golangci-lint@v2.6.1
-AIR_PKG ?= github.com/air-verse/air@v1.63.0
+GOLANGCI_PKG ?= github.com/golangci/golangci-lint/v2/cmd/golangci-lint@v2.6.2
+AIR_PKG ?= github.com/air-verse/air@v1.63.1
 SLOC_PKG ?= github.com/boyter/scc/v3@v3.6.0
 
 # -------------------------------------------------------------------