Bump version, update changelog.
Allow coverage to include calls to bin/bundle-audit.