diff --git a/CHANGELOG.md b/CHANGELOG.md
index 3161b5a..3d67d16 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,6 +3,13 @@
 All notable changes to this project will be documented in this file.
 This project adheres to [Semantic Versioning](http://semver.org/).
 
+## [Unreleased]
+
+## [1.0.1 - 2020-03-21]
+
+- Fixed security issues in 'acorn' and 'minimist' deps by
+  raising their versions
+
 ## [1.0.0 - 2020-01-24]
 
 - BREAKING CHANGE: support node versions >= 8.10
diff --git a/package-lock.json b/package-lock.json
index 2cb209d..ddad4f8 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -1,6 +1,6 @@
 {
   "name": "datetoken",
-  "version": "1.0.0",
+  "version": "1.0.1",
   "lockfileVersion": 1,
   "requires": true,
   "dependencies": {
diff --git a/package.json b/package.json
index 215b051..2426298 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "datetoken",
-  "version": "1.0.0",
+  "version": "1.0.1",
   "description": "Parse relative datetime tokens into date objects",
   "main": "./lib/index.js",
   "types": "./lib/index.d.ts",