diff --git a/Cargo.lock b/Cargo.lock
index 2bfbd448..c916fb76 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -2632,7 +2632,7 @@ checksum = "9b4f627cb1b25917193a259e49bdad08f671f8d9708acfd5fe0a8c1455d87220"
 
 [[package]]
 name = "pg-cli"
-version = "0.3.6"
+version = "0.3.7"
 dependencies = [
  "anyhow",
  "clap",
@@ -2652,7 +2652,7 @@ dependencies = [
 
 [[package]]
 name = "pg-core"
-version = "0.6.1"
+version = "0.6.2"
 dependencies = [
  "aead",
  "aes-gcm",
@@ -2694,7 +2694,7 @@ dependencies = [
 
 [[package]]
 name = "pg-ffi"
-version = "0.1.2"
+version = "0.1.3"
 dependencies = [
  "futures 0.3.32",
  "ibe",
@@ -2707,7 +2707,7 @@ dependencies = [
 
 [[package]]
 name = "pg-pkg"
-version = "0.5.11"
+version = "0.6.0"
 dependencies = [
  "actix-cors",
  "actix-governor",
diff --git a/pg-cli/CHANGELOG.md b/pg-cli/CHANGELOG.md
index 5a6e7d0d..f55b082c 100644
--- a/pg-cli/CHANGELOG.md
+++ b/pg-cli/CHANGELOG.md
@@ -7,6 +7,18 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [0.3.7](https://github.com/encryption4all/postguard/compare/pg-cli-v0.3.6...pg-cli-v0.3.7) - 2026-07-30
+
+### Added
+
+- *(api)* accept Yivi condiscon in IrmaAuthRequest ([#198](https://github.com/encryption4all/postguard/pull/198))
+
+### Other
+
+- *(pg-cli)* drop useless borrow in decrypt eprintln (clippy) ([#231](https://github.com/encryption4all/postguard/pull/231))
+- bump reqwest 0.12 → 0.13 and inquire 0.6 → 0.9 ([#196](https://github.com/encryption4all/postguard/pull/196))
+- consume irmars from crates.io and bump reqwest to 0.12 ([#192](https://github.com/encryption4all/postguard/pull/192))
+
 ## [0.3.6](https://github.com/encryption4all/postguard/compare/pg-cli-v0.3.5...pg-cli-v0.3.6) - 2026-05-16
 
 ### Other
diff --git a/pg-cli/Cargo.toml b/pg-cli/Cargo.toml
index 8a9cb032..1a3d7a45 100644
--- a/pg-cli/Cargo.toml
+++ b/pg-cli/Cargo.toml
@@ -11,10 +11,10 @@ license = "MIT"
 repository = "https://github.com/encryption4all/postguard"
 categories = ["cryptography"]
 name = "pg-cli"
-version = "0.3.6"
+version = "0.3.7"
 
 [dependencies]
-pg-core = { path = "../pg-core", version = "0.6.1", features = ["stream"] }
+pg-core = { path = "../pg-core", version = "0.6.2", features = ["stream"] }
 futures = "0.3.27"
 rand = "0.8.4"
 clap = { version = "4", features = ["derive"] }
diff --git a/pg-core/CHANGELOG.md b/pg-core/CHANGELOG.md
index 7e8dbb48..20dae696 100644
--- a/pg-core/CHANGELOG.md
+++ b/pg-core/CHANGELOG.md
@@ -7,6 +7,25 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [0.6.2](https://github.com/encryption4all/postguard/compare/pg-core-v0.6.1...pg-core-v0.6.2) - 2026-07-30
+
+### Added
+
+- *(api)* pin the v2 HTTP contract and reject unknown request fields ([#242](https://github.com/encryption4all/postguard/pull/242))
+- *(api)* accept Yivi condiscon in IrmaAuthRequest ([#198](https://github.com/encryption4all/postguard/pull/198))
+
+### Fixed
+
+- bound stream signature length ([#228](https://github.com/encryption4all/postguard/pull/228))
+
+### Other
+
+- *(compat)* HEAD sample sealer plus published pg-core reader crate ([#265](https://github.com/encryption4all/postguard/pull/265))
+- *(core)* golden wire-format fixtures pin VERSION_V3 in-repo ([#243](https://github.com/encryption4all/postguard/pull/243))
+- clear clippy warning backlog for the clippy CI job ([#193](https://github.com/encryption4all/postguard/pull/193)) ([#229](https://github.com/encryption4all/postguard/pull/229))
+- consume irmars from crates.io and bump reqwest to 0.12 ([#192](https://github.com/encryption4all/postguard/pull/192))
+- bump bincode-next 3.0.0-rc.13 to 3.0.0-rc.14 ([#191](https://github.com/encryption4all/postguard/pull/191))
+
 ## [0.6.1](https://github.com/encryption4all/postguard/compare/pg-core-v0.6.0...pg-core-v0.6.1) - 2026-05-16
 
 ### Other
diff --git a/pg-core/Cargo.toml b/pg-core/Cargo.toml
index dc2c3f5e..01b6fd37 100644
--- a/pg-core/Cargo.toml
+++ b/pg-core/Cargo.toml
@@ -1,7 +1,7 @@
 [package]
 name = "pg-core"
 description = "PostGuard core library for communication and bytestream operations."
-version = "0.6.1"
+version = "0.6.2"
 authors = [
   "Leon Botros <l.botros@cs.ru.nl>",
   "Wouter Geraedts <git@woutergeraedts.nl>",
diff --git a/pg-ffi/CHANGELOG.md b/pg-ffi/CHANGELOG.md
index e8e35571..ae240e41 100644
--- a/pg-ffi/CHANGELOG.md
+++ b/pg-ffi/CHANGELOG.md
@@ -7,6 +7,12 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [0.1.3](https://github.com/encryption4all/postguard/compare/pg-ffi-v0.1.2...pg-ffi-v0.1.3) - 2026-07-30
+
+### Other
+
+- clear clippy warning backlog for the clippy CI job ([#193](https://github.com/encryption4all/postguard/pull/193)) ([#229](https://github.com/encryption4all/postguard/pull/229))
+
 ## [0.1.2](https://github.com/encryption4all/postguard/compare/pg-ffi-v0.1.1...pg-ffi-v0.1.2) - 2026-05-16
 
 ### Other
diff --git a/pg-ffi/Cargo.toml b/pg-ffi/Cargo.toml
index 7b56911d..e6b7528f 100644
--- a/pg-ffi/Cargo.toml
+++ b/pg-ffi/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "pg-ffi"
-version = "0.1.2"
+version = "0.1.3"
 edition = "2021"
 description = "C ABI wrapper around pg-core for PostGuard .NET SDK"
 license = "MIT"
diff --git a/pg-pkg/CHANGELOG.md b/pg-pkg/CHANGELOG.md
index 9932269b..0f52a167 100644
--- a/pg-pkg/CHANGELOG.md
+++ b/pg-pkg/CHANGELOG.md
@@ -7,6 +7,34 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [0.6.0](https://github.com/encryption4all/postguard/compare/pg-pkg-v0.5.11...pg-pkg-v0.6.0) - 2026-07-30
+
+### Added
+
+- *(pkg)* configurable email attribute type for API-key signing identities ([#244](https://github.com/encryption4all/postguard/pull/244))
+- *(api)* pin the v2 HTTP contract and reject unknown request fields ([#242](https://github.com/encryption4all/postguard/pull/242))
+- *(pkg)* proxy IRMA /statusevents SSE endpoint ([#200](https://github.com/encryption4all/postguard/pull/200))
+- *(api)* accept Yivi condiscon in IrmaAuthRequest ([#198](https://github.com/encryption4all/postguard/pull/198))
+
+### Fixed
+
+- *(pkg)* refresh the IRMA JWT verification key on signature mismatch ([#241](https://github.com/encryption4all/postguard/pull/241))
+- *(pkg)* fetch the IRMA JWT verification key lazily instead of at startup ([#240](https://github.com/encryption4all/postguard/pull/240))
+- *(pg-pkg)* rate-limit on real client IP (X-Forwarded-For) behind a trusted proxy ([#230](https://github.com/encryption4all/postguard/pull/230))
+- *(pg-pkg)* add per-IP rate limiting to /v2 API endpoints ([#224](https://github.com/encryption4all/postguard/pull/224)) ([#226](https://github.com/encryption4all/postguard/pull/226))
+- *(pg-pkg)* validate session token path param before upstream URL ([#225](https://github.com/encryption4all/postguard/pull/225))
+- *(pg-pkg)* mask internal error details in HTTP responses ([#221](https://github.com/encryption4all/postguard/pull/221))
+- *(pg-pkg)* [**breaking**] require explicit --allowed-origins for CORS ([#216](https://github.com/encryption4all/postguard/pull/216)) ([#219](https://github.com/encryption4all/postguard/pull/219))
+
+### Other
+
+- breaking-change gate on the pg-pkg OpenAPI contract (oasdiff) ([#269](https://github.com/encryption4all/postguard/pull/269))
+- clear clippy warning backlog for the clippy CI job ([#193](https://github.com/encryption4all/postguard/pull/193)) ([#229](https://github.com/encryption4all/postguard/pull/229))
+- bump reqwest 0.12 → 0.13 and inquire 0.6 → 0.9 ([#196](https://github.com/encryption4all/postguard/pull/196))
+- consume irmars from crates.io and bump reqwest to 0.12 ([#192](https://github.com/encryption4all/postguard/pull/192))
+- bump bincode-next 3.0.0-rc.13 to 3.0.0-rc.14 ([#191](https://github.com/encryption4all/postguard/pull/191))
+- address cargo audit advisories
+
 ## [0.5.11](https://github.com/encryption4all/postguard/compare/pg-pkg-v0.5.10...pg-pkg-v0.5.11) - 2026-05-16
 
 ### Added
diff --git a/pg-pkg/Cargo.toml b/pg-pkg/Cargo.toml
index 1ac36947..84b6cc0b 100644
--- a/pg-pkg/Cargo.toml
+++ b/pg-pkg/Cargo.toml
@@ -11,7 +11,7 @@ license = "MIT"
 categories = ["cryptography"]
 repository = "https://github.com/encryption4all/postguard"
 name = "pg-pkg"
-version = "0.5.11"
+version = "0.6.0"
 
 [dependencies]
 actix-cors = "0.7"
@@ -51,5 +51,5 @@ version = "0.3"
 
 [dependencies.pg-core]
 path = "../pg-core"
-version = "0.6.1"
+version = "0.6.2"
 features = []