diff --git a/.aqua/aqua.yaml b/.aqua/aqua.yaml
index b78dae8..5d76858 100644
--- a/.aqua/aqua.yaml
+++ b/.aqua/aqua.yaml
@@ -13,7 +13,7 @@ registries:
 packages:
   - name: miniscruff/changie@v1.12.0
     tags: ['release']
-  - name: golang/go@go1.20.3
+  - name: golang/go@go1.21.0
     tags: ['first', 'release', 'test', 'scan', 'lint']
   - name: direnv/direnv@v2.32.2
   - name: magefile/mage@v1.14.0
diff --git "a/.changes/unreleased/\342\254\206\357\270\217 Dependencies-20230817-161010.yaml" "b/.changes/unreleased/\342\254\206\357\270\217 Dependencies-20230817-161010.yaml"
deleted file mode 100644
index a281b66..0000000
--- "a/.changes/unreleased/\342\254\206\357\270\217 Dependencies-20230817-161010.yaml"	
+++ /dev/null
@@ -1,3 +0,0 @@
-kind: ⬆️ Dependencies
-body: Bump changie installation, goreleaser.
-time: 2023-08-17T16:10:10.261254759Z
diff --git "a/.changes/unreleased/\360\237\224\250 Refactor-20230902-001843.yaml" "b/.changes/unreleased/\360\237\224\250 Refactor-20230902-001843.yaml"
deleted file mode 100644
index 749e90e..0000000
--- "a/.changes/unreleased/\360\237\224\250 Refactor-20230902-001843.yaml"	
+++ /dev/null
@@ -1,3 +0,0 @@
-kind: "\U0001F528 Refactor"
-body: Improve logging with error wrapping and remove deprecated Go `ioutil` usage.
-time: 2023-09-02T00:18:43.498923266Z
diff --git "a/.changes/unreleased/\360\237\244\226 CI & Build-20230902-001908.yaml" "b/.changes/unreleased/\360\237\244\226 CI & Build-20230902-001908.yaml"
deleted file mode 100644
index 74530f2..0000000
--- "a/.changes/unreleased/\360\237\244\226 CI & Build-20230902-001908.yaml"	
+++ /dev/null
@@ -1,4 +0,0 @@
-kind: "\U0001F916 CI & Build"
-body: |
-  Improve mage tasks with secret setup and tear down for better development support and troubleshooting.
-time: 2023-09-02T00:19:08.498047478Z
diff --git a/.changes/v1.2.1.md b/.changes/v1.2.1.md
new file mode 100644
index 0000000..ca82374
--- /dev/null
+++ b/.changes/v1.2.1.md
@@ -0,0 +1,22 @@
+## v1.2.1 - 2023-09-05
+
+### 📘 Documentation
+
+- Include detail on providing `tld` in the configuration, allowing `eu` and other TLDs to be used.
+- Mention `tilt up` in the initial setup config as viable option.
+
+### 🤖 CI & Build
+
+- Improve mage tasks with secret setup and tear down for better development support and troubleshooting.
+- Bump go version in release pipeline to use `1.21` as can include standard library security improvements.
+- Remove failing error condition on `mage job:rebuild` to better allow default setup without running local builds, such as just using the published docker image.
+  This supports easier demo/test usage by support.
+
+### 🔨 Refactor
+
+- Improve logging with error wrapping and remove deprecated Go `ioutil` usage.
+
+### ⬆️ Dependencies
+
+- Bump tooling such as changie, release, trunk, more security scanners.
+- Other dependency bumps such as `golang.org/x/net`.
diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml
index f40fd48..c1166b9 100644
--- a/.github/workflows/lint.yml
+++ b/.github/workflows/lint.yml
@@ -2,10 +2,10 @@
 name: lint
 on:
   # Run CI against all pushes (direct commits, also merged PRs), Pull Requests
-  push:
-    branches:
-      - main
-      - stable-*
+  # push:
+  #   branches:
+  #     - main
+  #     - stable-*
   pull_request:
   # Run CI once per day (at 06:00 UTC)
   # This ensures that even if there haven't been commits that we are still testing against latest version of ansible-test for each ansible-base version
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index ba4e46c..91cbb18 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -20,7 +20,9 @@ jobs:
       - name: Setup Golang with cache
         uses: magnetikonline/action-golang-cache@797f193169d3c8ba6f60d90f50ecdadd2583fbd8 # tag=v3
         with:
-          go-version-file: go.mod
+          go-version: ~1.21
+        # with:
+        #   go-version-file: go.mod
 
       - uses: aquaproj/aqua-installer@61e2563dfe7674cbf74fe6ec212e444198a3bb00 # tag=v2.0.2
         with:
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 22aa2ba..8383c20 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -6,6 +6,22 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html),
 and is generated by [Changie](https://github.com/miniscruff/changie).
 
+## v1.2.1 - 2023-09-05
+
+### 🤖 CI & Build
+
+- Improve mage tasks with secret setup and tear down for better development support and troubleshooting.
+
+- Bump go version in release pipeline to use `1.21` as can include standard library security improvements.
+
+### 🔨 Refactor
+
+- Improve logging with error wrapping and remove deprecated Go `ioutil` usage.
+
+### ⬆️ Dependencies
+
+- Bump changie installation, goreleaser.
+
 ## v1.2.0 - 2023-04-27
 
 ### 🤖 CI & Build
diff --git a/charts/dsv-injector/Chart.yaml b/charts/dsv-injector/Chart.yaml
index 0461cf8..813e009 100644
--- a/charts/dsv-injector/Chart.yaml
+++ b/charts/dsv-injector/Chart.yaml
@@ -8,7 +8,7 @@ description: |
   NAMESPACE='dsv'
   CREDENTIALS_JSON_FILE='.cache/credentials.json' # replace with your credentials file
   IMAGE_REPOSITORY='docker.io/delineaxpm/dsv-k8s'
-  IMAGE_TAG='v1.2.0' # use latest for test, but pin to a specific version for production
+  IMAGE_TAG='v1.2.1' # use latest for test, but pin to a specific version for production
 
   helm install \
       --namespace $NAMESPACE \
@@ -29,7 +29,7 @@ keywords:
   - secrets
   - vault
 type: application
-version: v1.2.0
+version: v1.2.1
 appVersion: latest
 maintainers:
   - name: Sheldon Hull
diff --git a/charts/dsv-injector/values.yaml b/charts/dsv-injector/values.yaml
index 893ced9..2e28361 100644
--- a/charts/dsv-injector/values.yaml
+++ b/charts/dsv-injector/values.yaml
@@ -29,7 +29,7 @@ image:
   # -- Overrides the image tag whose default is the chart appVersion.
   # Local Testing: Use `latest`.
   # @default -- the current app version/chart version
-  tag: v1.2.0
+  tag: v1.2.1
   # -- Entrypoint is the path to the binary. Since the container image could contain multiple binaries, this makes sure it's correctly mapped to the binary.
   entrypoint: /app/dsv-injector
 
diff --git a/charts/dsv-syncer/Chart.yaml b/charts/dsv-syncer/Chart.yaml
index d96d575..9d3a38e 100644
--- a/charts/dsv-syncer/Chart.yaml
+++ b/charts/dsv-syncer/Chart.yaml
@@ -7,7 +7,7 @@ description: |
   ```shell
   NAMESPACE='dsv'
   IMAGE_REPOSITORY='docker.io/delineaxpm/dsv-k8s'
-  IMAGE_TAG='v1.2.0' # use latest for test, but pin to a specific version for production
+  IMAGE_TAG='v1.2.1' # use latest for test, but pin to a specific version for production
 
   helm install \
       --namespace $NAMESPACE \
@@ -26,7 +26,7 @@ keywords:
   - secrets
   - vault
 type: application
-version: v1.2.0
+version: v1.2.1
 appVersion: latest
 maintainers:
   - name: Sheldon Hull
diff --git a/charts/dsv-syncer/values.yaml b/charts/dsv-syncer/values.yaml
index 6ab7db4..300e9c1 100644
--- a/charts/dsv-syncer/values.yaml
+++ b/charts/dsv-syncer/values.yaml
@@ -18,7 +18,7 @@ image:
   # -- Overrides the image tag whose default is the chart appVersion.
   # Local Testing: Use `latest`.
   # @default -- the current app version/chart version
-  tag: v1.2.0
+  tag: v1.2.1
   # -- Entrypoint is the path to the binary. Since the container image could contain multiple binaries, this makes sure it's correctly mapped to the binary.
   entrypoint: /app/dsv-syncer