diff --git a/CHANGELOG.md b/CHANGELOG.md
index 3226cb4a..4b118946 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -6,6 +6,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [2.0.1] - 2021-12-17
 ### Added
 - Release shell reports success.
 
@@ -13,6 +14,21 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 - The release shell's makeRelease now uses the provided github token correctly.
 - Avery, Lomax, Quinn and Bendini having wrong versions in Cargo.toml.
 - Fixed 2.0.0 changelog.
+- avery: The generated keys used a hash of the DER format but when the key is saved and
+  later read from disk it uses the PEM format, causing a hash mismatch. This changes the
+  hash to avery: always use the PEM variant.
+
+### Packages
+- avery: 2.0.1
+- bendini: 2.0.0
+- firmRust: 1.0.0
+- firmTypes-python: 1.0.0
+- firmTypes-rust-withServices, firmTypes-rust-withoutServices: 1.0.0
+- lomax: 2.0.0
+- protocols-withServices-python, protocols-withServices-rust, protocols-withoutServices-python, protocols-withoutServices-rust: 2.0.0
+- quinn: 2.0.0
+- tonicMiddleware: 1.0.0
+- windowsInstaller: 0.1.1
 
 ## [2.0.0] - 2021-12-16
 ### Packages
diff --git a/project.nix b/project.nix
index 95a21231..8b540701 100644
--- a/project.nix
+++ b/project.nix
@@ -5,7 +5,7 @@ let
 in
 nedryland.mkProject rec {
   name = "firm";
-  version = "2.0.0";
+  version = "2.0.1";
   baseExtensions = [
     ./extensions/nedryland/function.nix
     ./extensions/nedryland/runtime.nix
diff --git a/services/avery/CHANGELOG.md b/services/avery/CHANGELOG.md
index 930dd13d..870c7a52 100644
--- a/services/avery/CHANGELOG.md
+++ b/services/avery/CHANGELOG.md
@@ -6,12 +6,13 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [2.0.1] - 2021-12-17
+
 ### Fixed
 - The generated keys used a hash of the DER format but when the key is saved and later
   read from disk it uses the PEM format, causing a hash mismatch. This changes the hash to
   always use the PEM variant.
 
-
 ## [2.0.0] - 2021-12-16
 
 ### Changed
diff --git a/services/avery/Cargo.lock b/services/avery/Cargo.lock
index 12069434..694ab0c4 100644
--- a/services/avery/Cargo.lock
+++ b/services/avery/Cargo.lock
@@ -108,7 +108,7 @@ checksum = "cdb031dd78e28731d87d56cc8ffef4a8f36ca26c38fe2de700543e627f8a464a"
 
 [[package]]
 name = "avery"
-version = "2.0.0"
+version = "2.0.1"
 dependencies = [
  "async-stream",
  "async-trait",
diff --git a/services/avery/Cargo.toml b/services/avery/Cargo.toml
index cc54f039..40e47eb1 100644
--- a/services/avery/Cargo.toml
+++ b/services/avery/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "avery"
-version = "2.0.0"
+version = "2.0.1"
 authors = ["GBK Pipeline Team <pipeline@goodbyekansas.com>"]
 edition = "2021"