diff --git a/.release-please-manifest.json b/.release-please-manifest.json
index e6faaf868..c73a5f3c8 100644
--- a/.release-please-manifest.json
+++ b/.release-please-manifest.json
@@ -12,7 +12,7 @@
     "actions/setup-conftest": "1.0.1",
     "actions/setup-argo": "1.0.1",
     "actions/generate-openapi-clients": "1.0.1",
-    "actions/push-to-gcs": "0.2.0",
+    "actions/push-to-gcs": "0.2.1",
     "actions/techdocs-rewrite-relative-links": "1.0.1",
     "actions/validate-policy-bot-config": "1.1.0",
     "actions/trigger-argo-workflow": "1.1.0",
diff --git a/actions/push-to-gcs/CHANGELOG.md b/actions/push-to-gcs/CHANGELOG.md
index dc51cde8e..5924a0aa5 100644
--- a/actions/push-to-gcs/CHANGELOG.md
+++ b/actions/push-to-gcs/CHANGELOG.md
@@ -1,5 +1,32 @@
 # Changelog
 
+## [0.2.1](https://github.com/grafana/shared-workflows/compare/push-to-gcs-v0.2.0...push-to-gcs-v0.2.1) (2025-05-08)
+
+
+### 🐛 Bug Fixes
+
+* ensure every action disables git credential persistence ([#821](https://github.com/grafana/shared-workflows/issues/821)) ([31ebf3f](https://github.com/grafana/shared-workflows/commit/31ebf3f8e5d0f8709e6ec4ef73b39dd2bd08f959))
+* **everything:** fix all things for zizmor ([af9b0c5](https://github.com/grafana/shared-workflows/commit/af9b0c52635d39023136fb9312a354f91d9b2bfd))
+
+
+### 📝 Documentation
+
+* **multiple-actions:** move permissions to job level in workflow examples ([49c90b1](https://github.com/grafana/shared-workflows/commit/49c90b10fcbce463983bed45932cf468b8bd06ce))
+* **multiple-actions:** move permissions to job level in workflows ([#969](https://github.com/grafana/shared-workflows/issues/969)) ([49c90b1](https://github.com/grafana/shared-workflows/commit/49c90b10fcbce463983bed45932cf468b8bd06ce))
+
+
+### 🤖 Continuous Integration
+
+* don't persist shared workflows folder after action is done ([#905](https://github.com/grafana/shared-workflows/issues/905)) ([9a34c93](https://github.com/grafana/shared-workflows/commit/9a34c9302d2064c48e03cf7c4c7cd45998c4615e))
+* remove gcp credentials after composite action finishes ([#925](https://github.com/grafana/shared-workflows/issues/925)) ([62f8dda](https://github.com/grafana/shared-workflows/commit/62f8ddaa78b23147b22ba6a38df2b97963dab4b3))
+
+
+### 🔧 Miscellaneous Chores
+
+* **deps:** update google-github-actions/upload-cloud-storage action to v2.2.2 ([#741](https://github.com/grafana/shared-workflows/issues/741)) ([5f7a536](https://github.com/grafana/shared-workflows/commit/5f7a5361daa274f9a1994893a4c21a8967cf2a24))
+* **deps:** update google-github-actions/upload-cloud-storage action to v2.2.2 ([#749](https://github.com/grafana/shared-workflows/issues/749)) ([948bff0](https://github.com/grafana/shared-workflows/commit/948bff0b53f9d51876b8bca2cb1408384b4ce3b5))
+* **main:** release push-to-gar-docker 0.3.0 ([#794](https://github.com/grafana/shared-workflows/issues/794)) ([a7bc536](https://github.com/grafana/shared-workflows/commit/a7bc5367c4a91c389526d58839d8f6224dba4dcc))
+
 ## [0.2.0](https://github.com/grafana/shared-workflows/compare/push-to-gcs-v0.1.0...push-to-gcs-v0.2.0) (2025-01-28)
 
 
diff --git a/actions/push-to-gcs/README.md b/actions/push-to-gcs/README.md
index a860fa5a8..f200c6543 100644
--- a/actions/push-to-gcs/README.md
+++ b/actions/push-to-gcs/README.md
@@ -34,14 +34,14 @@ jobs:
         id: login-to-gcs
 
         # Upload a single file to the bucket root
-      - uses: grafana/shared-workflows/actions/push-to-gcs@push-to-gcs-v0.2.0
+      - uses: grafana/shared-workflows/actions/push-to-gcs@push-to-gcs-v0.2.1
         with:
           bucket: ${{ steps.login-to-gcs.outputs.bucket }}
           path: file.txt
           environment: "dev" # Can be dev/prod (defaults to dev)
 
         # Upload a single file and apply a predefined ACL. See `predefinedAcl` for options.
-      - uses: grafana/shared-workflows/actions/push-to-gcs@push-to-gcs-v0.2.0
+      - uses: grafana/shared-workflows/actions/push-to-gcs@push-to-gcs-v0.2.1
         with:
           bucket: ${{ steps.login-to-gcs.outputs.bucket }}
           path: file.txt
@@ -49,28 +49,28 @@ jobs:
           environment: "dev"
 
         # Here are 3 equivalent statements to upload a single file and its parent directory to the bucket root
-      - uses: grafana/shared-workflows/actions/push-to-gcs@push-to-gcs-v0.2.0
+      - uses: grafana/shared-workflows/actions/push-to-gcs@push-to-gcs-v0.2.1
         with:
           bucket: ${{ steps.login-to-gcs.outputs.bucket }}
           path: folder/file.txt
-      - uses: grafana/shared-workflows/actions/push-to-gcs@push-to-gcs-v0.2.0
+      - uses: grafana/shared-workflows/actions/push-to-gcs@push-to-gcs-v0.2.1
         with:
           bucket: ${{ steps.login-to-gcs.outputs.bucket }}
           path: .
           glob: "folder/file.txt"
-      - uses: grafana/shared-workflows/actions/push-to-gcs@push-to-gcs-v0.2.0
+      - uses: grafana/shared-workflows/actions/push-to-gcs@push-to-gcs-v0.2.1
         with:
           bucket: ${{ steps.login-to-gcs.outputs.bucket }}
           path: folder
           glob: "file.txt"
 
         # Here are 2 equivalent statements to upload a single file WITHOUT its parent directory to the bucket root
-      - uses: grafana/shared-workflows/actions/push-to-gcs@push-to-gcs-v0.2.0
+      - uses: grafana/shared-workflows/actions/push-to-gcs@push-to-gcs-v0.2.1
         with:
           bucket: ${{ steps.login-to-gcs.outputs.bucket }}
           path: folder/file.txt
           parent: false
-      - uses: grafana/shared-workflows/actions/push-to-gcs@push-to-gcs-v0.2.0
+      - uses: grafana/shared-workflows/actions/push-to-gcs@push-to-gcs-v0.2.1
         with:
           bucket: ${{ steps.login-to-gcs.outputs.bucket }}
           path: folder
@@ -78,18 +78,18 @@ jobs:
           parent: false
 
         # Here are 2 equivalent statements to upload a directory with all subdirectories
-      - uses: grafana/shared-workflows/actions/push-to-gcs@push-to-gcs-v0.2.0
+      - uses: grafana/shared-workflows/actions/push-to-gcs@push-to-gcs-v0.2.1
         with:
           bucket: ${{ steps.login-to-gcs.outputs.bucket }}
           path: folder/
-      - uses: grafana/shared-workflows/actions/push-to-gcs@push-to-gcs-v0.2.0
+      - uses: grafana/shared-workflows/actions/push-to-gcs@push-to-gcs-v0.2.1
         with:
           bucket: ${{ steps.login-to-gcs.outputs.bucket }}
           path: .
           glob: "folder/**/*"
 
         # Specify a bucket prefix with `bucket_path`
-      - uses: grafana/shared-workflows/actions/push-to-gcs@push-to-gcs-v0.2.0
+      - uses: grafana/shared-workflows/actions/push-to-gcs@push-to-gcs-v0.2.1
         name: upload-yaml-to-some-path
         with:
           bucket: ${{ steps.login-to-gcs.outputs.bucket }}
@@ -97,14 +97,14 @@ jobs:
           bucket_path: some-path/
 
         # Upload all files of a type
-      - uses: grafana/shared-workflows/actions/push-to-gcs@push-to-gcs-v0.2.0
+      - uses: grafana/shared-workflows/actions/push-to-gcs@push-to-gcs-v0.2.1
         with:
           bucket: ${{ steps.login-to-gcs.outputs.bucket }}
           path: folder/
           glob: "*.txt"
 
         # upload all files of a type recursively
-      - uses: grafana/shared-workflows/actions/push-to-gcs@push-to-gcs-v0.2.0
+      - uses: grafana/shared-workflows/actions/push-to-gcs@push-to-gcs-v0.2.1
         with:
           bucket: ${{ steps.login-to-gcs.outputs.bucket }}
           path: folder/