diff --git a/requirements-dev.txt b/requirements-dev.txt
index 3d6bb9c..95a669c 100644
--- a/requirements-dev.txt
+++ b/requirements-dev.txt
@@ -1,4 +1,4 @@
-pyinstaller==6.21.0
+pyinstaller==6.22.1
 pytest==8.4.2
 pytest-asyncio==1.2.0
 bump-my-version==1.4.1
diff --git a/scripts/verify-release.ps1 b/scripts/verify-release.ps1
index 13e7be4..c25ce23 100644
--- a/scripts/verify-release.ps1
+++ b/scripts/verify-release.ps1
@@ -43,7 +43,7 @@ if ($Version -and $actualVersion -ne $Version) {
 }
 
 $changelog = Get-Content -LiteralPath "CHANGELOG.md" -Raw
-if ($changelog -notmatch "(?m)^## \[$([regex]::Escape($actualVersion))\] - \d{4}-\d{2}-\d{2}$") {
+if ($changelog -notmatch "(?m)^## \[$([regex]::Escape($actualVersion))\] - \d{4}-\d{2}-\d{2}\r?$") {
   throw "CHANGELOG.md has no dated section for $actualVersion."
 }
 if (-not (Test-Path -LiteralPath "requirements-lock.txt")) {
diff --git a/tests/test_verify_release.py b/tests/test_verify_release.py
new file mode 100644
index 0000000..e6986df
--- /dev/null
+++ b/tests/test_verify_release.py
@@ -0,0 +1,67 @@
+"""Integration tests for the release metadata verifier."""
+
+from __future__ import annotations
+
+import shutil
+import subprocess
+from pathlib import Path
+
+import pytest
+
+
+REPO_ROOT = Path(__file__).resolve().parents[1]
+
+
+def test_verify_release_accepts_crlf_changelog(tmp_path: Path) -> None:
+    shell = shutil.which("pwsh") or shutil.which("powershell")
+    if shell is None:
+        pytest.skip("PowerShell is required to run the release verifier")
+
+    (tmp_path / "scripts").mkdir()
+    (tmp_path / "velo").mkdir()
+    (tmp_path / "installer").mkdir()
+    shutil.copy2(
+        REPO_ROOT / "scripts" / "verify-release.ps1",
+        tmp_path / "scripts" / "verify-release.ps1",
+    )
+    (tmp_path / "pyproject.toml").write_text(
+        '[project]\nversion = "2.3.1"\n', encoding="utf-8"
+    )
+    (tmp_path / "velo" / "__init__.py").write_text(
+        '__version__ = "2.3.1"\n', encoding="utf-8"
+    )
+    (tmp_path / "velo" / "defaults.py").write_text(
+        'APP_VERSION = "2.3.1"\n', encoding="utf-8"
+    )
+    (tmp_path / "installer" / "Velo.iss").write_text(
+        '#define AppVersion "2.3.1"\n', encoding="utf-8"
+    )
+    (tmp_path / "CHANGELOG.md").write_bytes(
+        b"# Changelog\r\n\r\n## [2.3.1] - 2026-08-20\r\n"
+    )
+    (tmp_path / "requirements-lock.txt").write_text("", encoding="utf-8")
+    subprocess.run(
+        ["git", "init", "--quiet"],
+        cwd=tmp_path,
+        check=True,
+        capture_output=True,
+        text=True,
+    )
+
+    result = subprocess.run(
+        [
+            shell,
+            "-NoProfile",
+            "-ExecutionPolicy",
+            "Bypass",
+            "-File",
+            str(tmp_path / "scripts" / "verify-release.ps1"),
+            "-Version",
+            "2.3.1",
+        ],
+        cwd=tmp_path,
+        capture_output=True,
+        text=True,
+    )
+
+    assert result.returncode == 0, result.stdout + result.stderr