diff --git a/.release-please-manifest.json b/.release-please-manifest.json
index bc9ea0cf..539e7e5d 100644
--- a/.release-please-manifest.json
+++ b/.release-please-manifest.json
@@ -1,4 +1,4 @@
 {
   ".": "0.42.9",
-  "mcp-package": "0.1.2"
+  "mcp-package": "0.1.3"
 }
diff --git a/mcp-package/CHANGELOG.md b/mcp-package/CHANGELOG.md
new file mode 100644
index 00000000..d062833b
--- /dev/null
+++ b/mcp-package/CHANGELOG.md
@@ -0,0 +1,8 @@
+# Changelog
+
+## [0.1.3](https://github.com/grafana/plugin-validator/compare/mcp/v0.1.2...mcp/v0.1.3) (2026-06-19)
+
+
+### 🐛 Bug Fixes
+
+* **security/high/mcp-package:** update security mcp-package tar to ^7.5.16 [security] ([#615](https://github.com/grafana/plugin-validator/issues/615)) ([94a5883](https://github.com/grafana/plugin-validator/commit/94a5883bccde88c6d927b7dd1e227b2b6d616480))
diff --git a/mcp-package/package.json b/mcp-package/package.json
index 96fc55d3..dc7e757e 100644
--- a/mcp-package/package.json
+++ b/mcp-package/package.json
@@ -1,6 +1,6 @@
 {
     "name": "@grafana/plugin-validator-mcp",
-    "version": "0.1.2",
+    "version": "0.1.3",
     "description": "Model Context Protocol (MCP) server for Grafana Plugin Validator - provides AI assistants with validation capabilities",
     "main": "index.js",
     "repository": {