(`--bump` is maybe more aligned with `--update`) But `--changelog` is expected deterministically update the `CHANGELOG.md` and (possibly unwanted) update `package.json` to match the latest version.