diff --git a/.release-please-manifest.json b/.release-please-manifest.json
index f0d6336..f4ce973 100644
--- a/.release-please-manifest.json
+++ b/.release-please-manifest.json
@@ -1,4 +1,4 @@
 {
-  ".": "0.5.0"
+  ".": "0.6.0"
 }
 
diff --git a/CHANGELOG.md b/CHANGELOG.md
index a111b00..ebec135 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,5 +1,36 @@
 # Changelog
 
+## [0.6.0](https://github.com/smekcio/ksef-client-python/compare/v0.5.0...v0.6.0) (2026-02-22)
+
+
+### Features
+
+* **cli:** add token-store policy visibility and plaintext warnings ([fc8e779](https://github.com/smekcio/ksef-client-python/commit/fc8e77951824e6290f50f3796241767f05d268df))
+* **cli:** add token-store policy visibility and plaintext warnings ([3249bda](https://github.com/smekcio/ksef-client-python/commit/3249bda53efbda9052d117971ad7871efb251bbb))
+* **cli:** harden auth secret input handling ([d7b7336](https://github.com/smekcio/ksef-client-python/commit/d7b733653d31c7b802feba894d7a9bbdb0913e32))
+* **cli:** harden auth secret input handling ([99887c7](https://github.com/smekcio/ksef-client-python/commit/99887c78d2dca9537b19b3555ee33853b378b652))
+* **cli:** implement DX-first KSeF CLI with docs and tests ([295fb6e](https://github.com/smekcio/ksef-client-python/commit/295fb6e47865878f03a2fa3b800112e8b1a57c1b))
+* **cli:** KSeF CLI with docs and tests ([#15](https://github.com/smekcio/ksef-client-python/issues/15)) ([797adfd](https://github.com/smekcio/ksef-client-python/commit/797adfdafdf1bd9df5baf83d738a6f243cb2b4f3))
+* **security:** enforce export part hash verification ([966c895](https://github.com/smekcio/ksef-client-python/commit/966c89572c5353c9993495f82135937414e73d1e))
+* **security:** enforce export part hash verification ([2744e21](https://github.com/smekcio/ksef-client-python/commit/2744e21859c1f1f9dd917e39441a54d8d05d54b0))
+* **security:** validate presigned URLs for skip-auth transport ([81bc405](https://github.com/smekcio/ksef-client-python/commit/81bc405c7f7890bd036338a042198e5a9a367a43))
+* **security:** validate presigned URLs for skip-auth transport ([5ec3626](https://github.com/smekcio/ksef-client-python/commit/5ec36265f2e15f7e9ee221bdbafd5ad4af1281cc))
+
+
+### Bug Fixes
+
+* **ci:** cover auth secret-source guard paths ([ba4400a](https://github.com/smekcio/ksef-client-python/commit/ba4400a38745abf1b6b812b0722acc4d46766aa4))
+* **ci:** cover health token-store check normalization ([439d2ce](https://github.com/smekcio/ksef-client-python/commit/439d2ce430c6bb3994c3820ecbf45fc0ab815359))
+* **ci:** satisfy lint and 100% coverage for presigned URL hardening ([15144c7](https://github.com/smekcio/ksef-client-python/commit/15144c7113aefddc5d82559a4daa432125bb02a2))
+* **ci:** satisfy ruff checks for export hash workflow tests ([ce38add](https://github.com/smekcio/ksef-client-python/commit/ce38add5972e83e67392bf04874400cd53b33127))
+* **ci:** stabilize CLI tests and restore 100% coverage ([e2ff607](https://github.com/smekcio/ksef-client-python/commit/e2ff6076ad63d56b51a24c75d6931ad15ccb32f2))
+
+
+### Documentation
+
+* **readme:** refresh README copy and table of contents ([4743f5c](https://github.com/smekcio/ksef-client-python/commit/4743f5c0592803e7d0193696bf8059cf35305589))
+* remove DX-first wording from documentation ([15140ab](https://github.com/smekcio/ksef-client-python/commit/15140ab91179e8c8a943a5982c9c2ec4baa30af7))
+
 ## [0.5.0](https://github.com/smekcio/ksef-client-python/compare/v0.4.0...v0.5.0) (2026-02-19)
 
 
diff --git a/pyproject.toml b/pyproject.toml
index bda29ca..a4fede6 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "ksef-client"
-version = "0.5.0"
+version = "0.6.0"
 description = "Client SDK for KSeF API v2"
 readme = "README.md"
 requires-python = ">=3.10"