diff --git a/CHANGELOG.md b/CHANGELOG.md
index 807bdcf..fce0b40 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -7,6 +7,19 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [0.6.0](https://github.com/fells-code/seamless-auth-rust/compare/v0.5.0...v0.6.0) - 2026-11-06
+
+### Added
+
+- *(guard)* add an organization aware permission guard ([#40](https://github.com/fells-code/seamless-auth-rust/pull/40))
+- let verify-only resource servers require a user ([#37](https://github.com/fells-code/seamless-auth-rust/pull/37))
+
+### Fixed
+
+- keep the session cookies when a refresh fails transiently ([#39](https://github.com/fells-code/seamless-auth-rust/pull/39))
+- origin check whatever the SameSite setting, no JWKS lock across the fetch, no refresh replay ([#34](https://github.com/fells-code/seamless-auth-rust/pull/34))
+- sync the bundled adapter manifest with API 0.22.0
+
 ## [0.5.0](https://github.com/fells-code/seamless-auth-rust/compare/v0.4.0...v0.5.0) - 2026-11-01
 
 ### Added
diff --git a/Cargo.lock b/Cargo.lock
index 9712b78..5f44e67 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -1153,7 +1153,7 @@ dependencies = [
 
 [[package]]
 name = "seamless-auth"
-version = "0.5.0"
+version = "0.6.0"
 dependencies = [
  "axum",
  "base64 0.22.1",
diff --git a/Cargo.toml b/Cargo.toml
index aa17ca6..9d666e6 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "seamless-auth"
-version = "0.5.0"
+version = "0.6.0"
 edition = "2024"
 rust-version = "1.88"
 description = "Seamless Auth server adapter for Axum: cookie and bearer sessions in front of the Seamless Auth API"