diff --git a/CHANGELOG.md b/CHANGELOG.md
index 9962b5a91..886c25432 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,3 +1,9 @@
+### 2.11.2 (Thursday, September 10, 2026)
+### Features/Bug Fixes
+* fix: prevent duplicate reference coverage from causing fatal scan-accounting errors (#507)
+* fix: avoid false shell-parser limits on ordinary documentation (#507)
+* fix: preserve partial coverage for runtime-selected printf and wrapper paths (#508)
+---
 ### 2.11.1 (Monday, September 07, 2026)
 ### Features/Bug Fixes
 * fix: parse space-separated allowed-tools strings (fixes #327) (#330)
diff --git a/docs/release/skillspector-2.11.2.md b/docs/release/skillspector-2.11.2.md
new file mode 100644
index 000000000..a9e4000d7
--- /dev/null
+++ b/docs/release/skillspector-2.11.2.md
@@ -0,0 +1,63 @@
+# SkillSpector v2.11.2
+
+Released: 2026-09-10
+
+## Summary
+
+SkillSpector 2.11.2 fixes fatal reference-accounting errors and several false static-parser limits triggered by ordinary documentation. This patch also preserves incomplete-analysis reporting when a runtime-selected executable prevents exact command reconstruction.
+
+## Highlights
+
+- Complete reference accounting when Markdown labels and destinations identify the same artifact, or when several referenced artifacts appear on one source line.
+- Avoid false parser limits for simple runtime parameters, inline skill invocations, PowerShell member access, and long quoted prose.
+- Keep runtime-selected `printf` and wrapper paths marked as partially inspected.
+
+## Added
+
+- None.
+
+## Changed
+
+- Record reference-coverage completion once per source line.
+
+## Fixed
+
+- Deduplicate reference-coverage records for the same source file, line, and target, preventing fatal `unaccounted_work` errors from duplicate Markdown references.
+- Account for distinct reference targets on the same source line without creating conflicting completion records.
+- Distinguish simple runtime parameters from command substitutions and complex parameter expansions in bounded shell reconstruction, including inline `$ARGUMENTS` documentation ([#464](https://github.com/NVIDIA/SkillSpector/issues/464)).
+- Count unquoted characters separately from already-consumed quoted spans so long quoted prose does not cause a false command-word span limit.
+- Preserve partial coverage when runtime parameters select a `printf`, `command`, `builtin`, or `env` executable path; a recognized basename alone cannot establish which executable will run.
+
+## Security
+
+- Fixed security findings.
+
+## Breaking Changes and Migration
+
+- None. No new configuration is required.
+
+## Deprecations
+
+- None.
+
+## Validation
+
+Validated locally with Python 3.12 and uv 0.10.10:
+
+- `uv lock --check` — passed; third-party dependency versions are unchanged.
+- `uv run --no-sync make test-ci` — 4,013 passed, 14 skipped, 38 deselected, and 4 expected failures.
+- `uv run --no-sync make lint` and `uv run --no-sync make format-check` — passed.
+- Built wheel and source distributions; `twine check` passed for both artifacts.
+- `skillspector --version` — reported `SkillSpector v2.11.2`.
+- The GitHub release helper dry run resolved `v2.11.2` and the matching versioned release notes.
+- Docker image build and repository smoke tests passed on Linux/arm64, including the local safe fixture and public GitHub repository scans.
+- `git diff --check` — passed.
+
+## Known Limitations
+
+- Full LLM analysis and downstream CI behavior require validation in the deployment that uses the release.
+
+## References
+
+- [GitHub PR #507](https://github.com/NVIDIA/SkillSpector/pull/507)
+- [GitHub PR #508](https://github.com/NVIDIA/SkillSpector/pull/508)
diff --git a/pyproject.toml b/pyproject.toml
index 2138d76a9..5b7fa7b29 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "skillspector"
-version = "2.11.1"
+version = "2.11.2"
 description = "SkillSpector: Security scanner for AI agent skills (Claude Code, Cursor, and similar). Scans skills for vulnerabilities, malicious patterns, and security risks before installation. Supports Git repos, URLs, zips, and local directories; runs static pattern checks and optional LLM semantic analysis; outputs terminal, JSON, and Markdown reports with risk scoring."
 readme = "README.md"
 license = "Apache-2.0"
diff --git a/uv.lock b/uv.lock
index 4da0b409a..3a0df7ea1 100644
--- a/uv.lock
+++ b/uv.lock
@@ -2687,7 +2687,7 @@ wheels = [
 
 [[package]]
 name = "skillspector"
-version = "2.11.1"
+version = "2.11.2"
 source = { editable = "." }
 dependencies = [
     { name = "boto3" },