chore: bump version to 2.5.2 - security fix