diff --git a/.github/workflows/publish-phar.yml b/.github/workflows/publish-phar.yml
index 1313e275..dfe18334 100644
--- a/.github/workflows/publish-phar.yml
+++ b/.github/workflows/publish-phar.yml
@@ -1,8 +1,9 @@
 name: Publish the released PHAR
 
 on:
-  release:
-    types: [created]
+  push:
+    tags:
+      - 'v*'
   workflow_dispatch:
     inputs:
       tag:
@@ -54,7 +55,10 @@ jobs:
           name: pint.phar
           path: builds/pint.phar
 
-      - name: Upload the PHAR to release
-        run: gh release upload v${{ steps.tag.outputs.tag }} builds/pint.phar
+      - name: Publish the release with the PHAR attached
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        run: |
+          # Immutable releases reject assets added after publication, so the PHAR
+          # is attached as the release is created, in a single atomic step.
+          gh release create "v${{ steps.tag.outputs.tag }}" builds/pint.phar --generate-notes
diff --git a/CHANGELOG.md b/CHANGELOG.md
index da40e7e3..93f1b5b2 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,6 +1,13 @@
 # Release Notes
 
-## [Unreleased](https://github.com/laravel/pint/compare/v1.29.1...main)
+## [Unreleased](https://github.com/laravel/pint/compare/v1.29.2...main)
+
+## [v1.29.2](https://github.com/laravel/pint/compare/v1.29.1...v1.29.2) - 2026-06-16
+
+- fix: no longer accepts loading a configuration over insecure `http`
+- fix: sends errors to stderr
+- chore: various actions regarding github security
+- chore: uses `laravel/agent-detector`
 
 ## [v1.29.1](https://github.com/laravel/pint/compare/v1.29.0...v1.29.1) - 2026-04-20
 
diff --git a/RELEASE.md b/RELEASE.md
index 4c511fdc..36df419f 100644
--- a/RELEASE.md
+++ b/RELEASE.md
@@ -11,4 +11,12 @@
 
 5. Commit all changes
 6. Push all commits to GitHub
-7. [Create a new GitHub release](https://github.com/laravel/pint/releases/new) with the release notes
+7. Tag the release and push the tag:
+
+```zsh
+git tag v1.x.y
+git push origin v1.x.y
+```
+
+8. Edit the release title or notes on GitHub if needed (these remain editable
+   even though immutable releases lock the assets and tag)
diff --git a/builds/pint b/builds/pint
index 4a2003ab..29ac418e 100755
Binary files a/builds/pint and b/builds/pint differ
diff --git a/composer.json b/composer.json
index 02565aa2..1b736cd8 100644
--- a/composer.json
+++ b/composer.json
@@ -23,7 +23,7 @@
         "ext-xml": "*"
     },
     "require-dev": {
-        "friendsofphp/php-cs-fixer": "^3.95.7",
+        "friendsofphp/php-cs-fixer": "^3.95.8",
         "illuminate/view": "^12.62.0",
         "larastan/larastan": "^3.10.0",
         "laravel-zero/framework": "^12.1.0",
diff --git a/composer.lock b/composer.lock
index f6f73297..3d5996bb 100644
--- a/composer.lock
+++ b/composer.lock
@@ -4,7 +4,7 @@
         "Read more about it at https://getcomposer.org/doc/01-basic-usage.md#installing-dependencies",
         "This file is @generated automatically"
     ],
-    "content-hash": "157931aa53cd949d585f3d9372af01bb",
+    "content-hash": "dae9127b73ef4fa718d8527e2f8a13ed",
     "packages": [],
     "packages-dev": [
         {
@@ -964,16 +964,16 @@
         },
         {
             "name": "friendsofphp/php-cs-fixer",
-            "version": "v3.95.7",
+            "version": "v3.95.8",
             "source": {
                 "type": "git",
                 "url": "https://github.com/PHP-CS-Fixer/PHP-CS-Fixer.git",
-                "reference": "4fa4102a5617acae53f804f7c81475aaa2d6e813"
+                "reference": "4140023f552ff02346df9b1329742532166f677f"
             },
             "dist": {
                 "type": "zip",
-                "url": "https://api.github.com/repos/PHP-CS-Fixer/PHP-CS-Fixer/zipball/4fa4102a5617acae53f804f7c81475aaa2d6e813",
-                "reference": "4fa4102a5617acae53f804f7c81475aaa2d6e813",
+                "url": "https://api.github.com/repos/PHP-CS-Fixer/PHP-CS-Fixer/zipball/4140023f552ff02346df9b1329742532166f677f",
+                "reference": "4140023f552ff02346df9b1329742532166f677f",
                 "shasum": ""
             },
             "require": {
@@ -1057,7 +1057,7 @@
             ],
             "support": {
                 "issues": "https://github.com/PHP-CS-Fixer/PHP-CS-Fixer/issues",
-                "source": "https://github.com/PHP-CS-Fixer/PHP-CS-Fixer/tree/v3.95.7"
+                "source": "https://github.com/PHP-CS-Fixer/PHP-CS-Fixer/tree/v3.95.8"
             },
             "funding": [
                 {
@@ -1065,7 +1065,7 @@
                     "type": "github"
                 }
             ],
-            "time": "2026-06-13T17:51:53+00:00"
+            "time": "2026-06-16T09:52:26+00:00"
         },
         {
             "name": "fruitcake/php-cors",
@@ -1202,16 +1202,16 @@
         },
         {
             "name": "guzzlehttp/guzzle",
-            "version": "7.11.1",
+            "version": "7.11.2",
             "source": {
                 "type": "git",
                 "url": "https://github.com/guzzle/guzzle.git",
-                "reference": "5af96f374e0ab4ebd747b8310888c99d3adb0a8c"
+                "reference": "bf5f35ad4b774b9d7c5766c02035e865e7e3fdab"
             },
             "dist": {
                 "type": "zip",
-                "url": "https://api.github.com/repos/guzzle/guzzle/zipball/5af96f374e0ab4ebd747b8310888c99d3adb0a8c",
-                "reference": "5af96f374e0ab4ebd747b8310888c99d3adb0a8c",
+                "url": "https://api.github.com/repos/guzzle/guzzle/zipball/bf5f35ad4b774b9d7c5766c02035e865e7e3fdab",
+                "reference": "bf5f35ad4b774b9d7c5766c02035e865e7e3fdab",
                 "shasum": ""
             },
             "require": {
@@ -1310,7 +1310,7 @@
             ],
             "support": {
                 "issues": "https://github.com/guzzle/guzzle/issues",
-                "source": "https://github.com/guzzle/guzzle/tree/7.11.1"
+                "source": "https://github.com/guzzle/guzzle/tree/7.11.2"
             },
             "funding": [
                 {
@@ -1326,7 +1326,7 @@
                     "type": "tidelift"
                 }
             ],
-            "time": "2026-06-07T22:54:06+00:00"
+            "time": "2026-06-12T21:49:57+00:00"
         },
         {
             "name": "guzzlehttp/promises",
@@ -1414,16 +1414,16 @@
         },
         {
             "name": "guzzlehttp/psr7",
-            "version": "2.11.0",
+            "version": "2.11.1",
             "source": {
                 "type": "git",
                 "url": "https://github.com/guzzle/psr7.git",
-                "reference": "bbb5e61349fa5cb822b3e87842b951088b76b81f"
+                "reference": "640e2897bbee822dbc8af761d49e1a29b1f2a6b1"
             },
             "dist": {
                 "type": "zip",
-                "url": "https://api.github.com/repos/guzzle/psr7/zipball/bbb5e61349fa5cb822b3e87842b951088b76b81f",
-                "reference": "bbb5e61349fa5cb822b3e87842b951088b76b81f",
+                "url": "https://api.github.com/repos/guzzle/psr7/zipball/640e2897bbee822dbc8af761d49e1a29b1f2a6b1",
+                "reference": "640e2897bbee822dbc8af761d49e1a29b1f2a6b1",
                 "shasum": ""
             },
             "require": {
@@ -1513,7 +1513,7 @@
             ],
             "support": {
                 "issues": "https://github.com/guzzle/psr7/issues",
-                "source": "https://github.com/guzzle/psr7/tree/2.11.0"
+                "source": "https://github.com/guzzle/psr7/tree/2.11.1"
             },
             "funding": [
                 {
@@ -1529,7 +1529,7 @@
                     "type": "tidelift"
                 }
             ],
-            "time": "2026-06-02T12:30:48+00:00"
+            "time": "2026-06-12T21:50:12+00:00"
         },
         {
             "name": "guzzlehttp/uri-template",
diff --git a/config/app.php b/config/app.php
index 74b3e0fd..c3129a3a 100644
--- a/config/app.php
+++ b/config/app.php
@@ -31,7 +31,7 @@
     |
     */
 
-    'version' => '1.29.1',
+    'version' => '1.29.3',
 
     /*
     |--------------------------------------------------------------------------