diff --git a/CHANGELOG.md b/CHANGELOG.md
index d35e5f4..5d8d965 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -6,6 +6,8 @@ All notable changes to Jarl are documented here. The format follows
 
 ## [Unreleased]
 
+## [0.6.2] - 2026-10-21
+
 ### Added
 
 - A `certificates` role (template): `certificates:write`, for tokens and
diff --git a/README.md b/README.md
index b57b963..0789c69 100644
--- a/README.md
+++ b/README.md
@@ -202,7 +202,8 @@ review step.
 
 ## Status
 
-Version 0.6.1 is the current release. It gets certificates onto your
+Version 0.6.2 is the current release. It adds a `certificates` role
+for tokens that get certificates for other hosts. 0.6.1 gets certificates onto your
 other hosts (`jarl cert get`: Jarl obtains and renews them, a host downloads them and runs a
 hook, a daily timer keeps them current), exports certificates, fixes
 PTR records and overrides in linked zones, and makes one-view tokens
diff --git a/VERSION b/VERSION
index ee6cdce..b616048 100644
--- a/VERSION
+++ b/VERSION
@@ -1 +1 @@
-0.6.1
+0.6.2