diff --git a/CHANGELOG.md b/CHANGELOG.md
index 7c0c92b..6ddec26 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -77,6 +77,8 @@
 
 - The experimental `waitFor` functionality, and the library containing only that
   function, are now deprecated.
+- When a script is `dart run` it will always be precompiled, but with
+  incremental precompilation for following runs.
 
 ### `dart:core`
 
@@ -130,6 +132,15 @@
 - fixes false positives in `use_rethrow_when_possible`.
 - improves performance for `annotate_overrides`, `prefer_contains`, and
   `prefer_void_to_null`.
+### Pub
+- Detect potential leaks in `dart pub publish`.
+  When publishing, pub will examine your files for potential secret keys, and
+  warn you.
+
+  To ignore a file that has a false positive, add it to a
+  [`false_secrets`](https://dart.dev/go/false-secrets) section of your
+  `pubspec.yaml`.
+- Fixes unicode terminal detection windows
 
 ## 2.14.1 - 2021-09-09
 
diff --git a/DEPS b/DEPS
index 4d6d801..427f6e8 100644
--- a/DEPS
+++ b/DEPS
@@ -138,7 +138,7 @@
   "pool_rev": "7abe634002a1ba8a0928eded086062f1307ccfae",
   "process_rev": "56ece43b53b64c63ae51ec184b76bd5360c28d0b",
   "protobuf_rev": "c1eb6cb51af39ccbaa1a8e19349546586a5c8e31",
-  "pub_rev": "cd7a43f2109f7e5eb22e73c7f4e15d25fd57598e",
+  "pub_rev": "d95c5713dda518ed53ada70e00789e6aadbfbe48",
   "pub_semver_rev": "a43ad72fb6b7869607581b5fedcb186d1e74276a",
   "resource_rev": "6b79867d0becf5395e5819a75720963b8298e9a7",
   "root_certificates_rev": "692f6d6488af68e0121317a9c2c9eb393eb0ee50",