diff --git a/.github/workflows/deploy_github.yml b/.github/workflows/deploy_github.yml
index 08e79ca..f4cd113 100644
--- a/.github/workflows/deploy_github.yml
+++ b/.github/workflows/deploy_github.yml
@@ -5,6 +5,9 @@ on:
     tags:
       - '*'
 
+env:
+  PYINSTALLER_COMPILE_BOOTLOADER: 1
+
 jobs:
   build:
     name: Create Release
diff --git a/CHANGELOG b/CHANGELOG
index 5f71033..eb5736d 100644
--- a/CHANGELOG
+++ b/CHANGELOG
@@ -1,3 +1,6 @@
+2.15.3
+ - build: PyInstaller to rebuild its bootloader (avoid false positive
+   malware detection)
 2.15.2
  - fix: handle zero-valued contour spacing
  - setup: bump dclab to 0.57.4 (handle zero-valued spacing for KDE contour)