diff --git a/CHANGELOG.md b/CHANGELOG.md
index 3e55ac8..0003f39 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -6,8 +6,7 @@ is deliberate: see [Releasing](docs/releasing.md). Twelve releases were cut on
 live, every one of those interrupts every user. An alert people learn to ignore is
 worse than no alert, because one day it carries a security fix.
 
-## Unreleased
-
+## v0.6.0 — 2026-07-13
 ### Added
 
 - **`release.sh` — a two-stage release process, and a barrier that enforces it.**
diff --git a/install.sh b/install.sh
index 308bf87..9433570 100755
--- a/install.sh
+++ b/install.sh
@@ -18,7 +18,7 @@
 
 set -euo pipefail
 
-VERSION="0.5.1"
+VERSION="0.6.0"
 
 # The directory containing install.sh is the permanent install location.
 PATCH_DIR="$(cd "$(dirname "$0")" && pwd)"
diff --git a/patch/apply.sh b/patch/apply.sh
index 728febc..24fb1f4 100755
--- a/patch/apply.sh
+++ b/patch/apply.sh
@@ -32,7 +32,7 @@
 # Derive PATCH_DIR from this script's location (parent of the patch/ directory).
 PATCH_DIR="$(cd "$(dirname "$0")/.." && pwd)"
 LOG="$PATCH_DIR/apply.log"
-VERSION="0.5.1"
+VERSION="0.6.0"
 
 # Rotate log at 512 KB to avoid unbounded growth on a system volume.
 # Keep two prior generations (.1 and .2) so the last three boots are always available.
diff --git a/patch/create_task.py b/patch/create_task.py
index 0d398c4..a9f71d3 100755
--- a/patch/create_task.py
+++ b/patch/create_task.py
@@ -52,7 +52,7 @@ import subprocess
 import sys
 import time
 
-__version__ = "0.5.1"
+__version__ = "0.6.0"
 
 _PATCH_DIR = os.path.dirname(os.path.dirname(os.path.abspath(__file__)))
 _STATUS_FILE = os.path.join(_PATCH_DIR, "hook_status.json")
diff --git a/recover.sh b/recover.sh
index 3173425..a28011c 100755
--- a/recover.sh
+++ b/recover.sh
@@ -17,7 +17,7 @@
 #   bash /mnt/tank/truenas-truecloud-patch/patch/apply.sh
 #   systemctl restart middlewared
 
-VERSION="0.5.1"
+VERSION="0.6.0"
 
 PATCH_DIR="$(cd "$(dirname "$0")" && pwd)"
 
diff --git a/uninstall.sh b/uninstall.sh
index f70a2cf..fd174e2 100755
--- a/uninstall.sh
+++ b/uninstall.sh
@@ -3,7 +3,7 @@
 
 set -euo pipefail
 
-VERSION="0.5.1"
+VERSION="0.6.0"
 
 PATCH_DIR="$(cd "$(dirname "$0")" && pwd)"
 _HOOK_COMMENT='TrueCloud provider patch (S3/B2)'
diff --git a/update.sh b/update.sh
index 4b30274..4c24153 100644
--- a/update.sh
+++ b/update.sh
@@ -19,7 +19,7 @@
 
 set -euo pipefail
 
-VERSION="0.5.1"
+VERSION="0.6.0"
 
 PATCH_DIR="$(cd "$(dirname "$0")" && pwd)"
 _PREV_FILE="$PATCH_DIR/.update_previous"