diff --git a/CHANGELOG.md b/CHANGELOG.md
index c73c357..f37a8b2 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -7,6 +7,18 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [0.13.0] - 2026-10-01
+
+### Changed
+
+- **`affinidi-data-integrity` 0.7 → 0.8.** `DataIntegrityProof`, `SignOptions`,
+  `VerifyOptions` and `DataIntegrityError` are part of this crate's API, so this is a
+  breaking release. 0.8 is the release that moved `affinidi-bbs` to 0.4 (0.7.14 did the
+  same in a patch release, affinidi-tdk-rs #912). A caller still on data-integrity 0.7
+  would see two proof types; move both together. No wire change: credentials and proofs
+  are byte-identical to 0.12.
+- Dev-dependency `affinidi-tdk` 0.16 → 0.22.
+
 ## [0.12.0] - 2026-09-30
 
 **Conformance to the current DTG Core Credentials draft (Working Draft 0.6.0) and its frozen
diff --git a/Cargo.toml b/Cargo.toml
index 86a8725..0fb9039 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -1,7 +1,7 @@
 [package]
 name = "dtg-credentials"
 description = "Decentralized Trust Graph (DTG) Credentials Library"
-version = "0.12.0"
+version = "0.13.0"
 edition = "2024"
 publish = true
 authors = ["Glenn Gore <glenn@affinidi.com>"]
@@ -15,7 +15,7 @@ default = ["affinidi-signing"]
 affinidi-signing = ["dep:affinidi-secrets-resolver"]
 
 [dependencies]
-affinidi-data-integrity = "0.7"
+affinidi-data-integrity = "0.8"
 affinidi-secrets-resolver = { version = "0.5", optional = true }
 
 chrono = "0.4"
@@ -30,7 +30,7 @@ tracing = "0.1"
 unicode-normalization = "0.1"
 
 [dev-dependencies]
-affinidi-tdk = "0.16"
+affinidi-tdk = "0.22"
 anyhow = "1.0"
 tokio = "1"
 # The `data_room` example seals records for real rather than pretending to. Dev-only: