diff --git a/.github/workflows/goreleaser.yml b/.github/workflows/goreleaser.yml
index d8b4606a076..74d430064a3 100644
--- a/.github/workflows/goreleaser.yml
+++ b/.github/workflows/goreleaser.yml
@@ -66,4 +66,4 @@ jobs:
     uses: slsa-framework/slsa-github-generator/.github/workflows/generator_generic_slsa3.yml@v1.5.0
     with:
       base64-subjects: "${{ needs.goreleaser.outputs.hashes }}"
-      upload-assets: true # upload to a new release
+      upload-assets: false # upload to a new release
diff --git a/CHANGELOG.md b/CHANGELOG.md
index de62b75a135..758ba2f48bd 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,3 +1,9 @@
+v1.3.1:
+===
+
+### Fixes
+- [Bug #319](https://github.com/google/osv-scanner/issues/319) Fix segmentation fault when parsing CycloneDX without dependencies. 
+
 v1.3.0:
 ===
 
diff --git a/cmd/osv-scanner/main.go b/cmd/osv-scanner/main.go
index df386d3d172..7d80646fe03 100644
--- a/cmd/osv-scanner/main.go
+++ b/cmd/osv-scanner/main.go
@@ -14,7 +14,7 @@ import (
 
 var (
 	// Update this variable when doing a release
-	version = "1.3.0"
+	version = "1.3.1"
 	commit  = "n/a"
 	date    = "n/a"
 )
diff --git a/cmd/osv-scanner/main_test.go b/cmd/osv-scanner/main_test.go
index 7337da53146..fd382a510c5 100644
--- a/cmd/osv-scanner/main_test.go
+++ b/cmd/osv-scanner/main_test.go
@@ -118,7 +118,7 @@ func TestRun(t *testing.T) {
 			args:         []string{"", "--version"},
 			wantExitCode: 0,
 			wantStdout: `
-				osv-scanner version: 1.3.0
+				osv-scanner version: 1.3.1
 				commit: n/a
 				built at: n/a
 			`,