diff --git a/CHANGELOG.md b/CHANGELOG.md
index a62b1bc..5679244 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -7,7 +7,7 @@ Versioning: [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 today keeps working across minor and patch releases; a change that would break
 one waits for a major.
 
-## [Unreleased]
+## [0.6.0] - 2026-09-04
 
 ### Added
 
@@ -462,7 +462,8 @@ First release.
   to be re-run still leaves the immutable tags behind.
 
 [artifact-contract]: https://github.com/VizzleTF/owfeed/blob/main/docs/artifact-contract.md
-[Unreleased]: https://github.com/VizzleTF/owlab/compare/v0.5.6...HEAD
+[Unreleased]: https://github.com/VizzleTF/owlab/compare/v0.6.0...HEAD
+[0.6.0]: https://github.com/VizzleTF/owlab/compare/v0.5.6...v0.6.0
 [0.5.6]: https://github.com/VizzleTF/owlab/compare/v0.5.5...v0.5.6
 [0.5.5]: https://github.com/VizzleTF/owlab/compare/v0.5.4...v0.5.5
 [0.4.1]: https://github.com/VizzleTF/owlab/compare/v0.4.0...v0.4.1
diff --git a/README.md b/README.md
index 61ba755..4c10d5e 100644
--- a/README.md
+++ b/README.md
@@ -246,7 +246,7 @@ output for one release.
 ### Check it in CI
 
 ```yaml
-- uses: owfeed/owlab/action@v0.5.6
+- uses: owfeed/owlab/action@v0.6.0
   with:
     releases: "25.12.5 24.10.8"
     install: dist/*/luci-app-mine-*.apk
diff --git a/README_ru.md b/README_ru.md
index 61a80ac..d488448 100644
--- a/README_ru.md
+++ b/README_ru.md
@@ -247,7 +247,7 @@ dist/
 ### Проверять в CI
 
 ```yaml
-- uses: owfeed/owlab/action@v0.5.6
+- uses: owfeed/owlab/action@v0.6.0
   with:
     releases: "25.12.5 24.10.8"
     install: dist/*/luci-app-mine-*.apk
diff --git a/docs/reference.md b/docs/reference.md
index 729b79f..e5d3b95 100644
--- a/docs/reference.md
+++ b/docs/reference.md
@@ -466,7 +466,7 @@ add'` is the whole of "is anything stale".
 ### In GitHub Actions
 
 ```yaml
-- uses: owfeed/owlab/action@v0.5.6
+- uses: owfeed/owlab/action@v0.6.0
   with:
     releases: "25.12.5 24.10.8"
     install: dist/*/luci-app-mine-*.apk
@@ -478,7 +478,7 @@ add'` is the whole of "is anything stale".
 Every flag above has an input with the same name; `assert` and `install` take
 one per line. The action writes a table to the job summary and exposes
 `report` (the JSON path), `passed` and `failed` as outputs.
-`owfeed/owlab/setup@v0.5.6` installs the binary alone, for a job that drives
+`owfeed/owlab/setup@v0.6.0` installs the binary alone, for a job that drives
 `owlab` itself. Both verify the download against this repository's build
 attestation before the binary is executed or put on `PATH`.
 
diff --git a/docs/reference_ru.md b/docs/reference_ru.md
index ba67f40..143a644 100644
--- a/docs/reference_ru.md
+++ b/docs/reference_ru.md
@@ -407,7 +407,7 @@ caught», lua-шный `stack traceback:`): поймав исключение, L
 ### В GitHub Actions
 
 ```yaml
-- uses: owfeed/owlab/action@v0.5.6
+- uses: owfeed/owlab/action@v0.6.0
   with:
     releases: "25.12.5 24.10.8"
     install: dist/*/luci-app-mine-*.apk
@@ -418,7 +418,7 @@ caught», lua-шный `stack traceback:`): поймав исключение, L
 
 У каждого флага выше есть одноимённый input; `assert` и `install` принимают по
 одному значению на строку. Экшен пишет таблицу в summary джоба и отдаёт outputs
-`report` (путь к JSON), `passed` и `failed`. `owfeed/owlab/setup@v0.5.6`
+`report` (путь к JSON), `passed` и `failed`. `owfeed/owlab/setup@v0.6.0`
 ставит только бинарь — для джоба, который сам вызывает `owlab`. Оба проверяют
 скачанное по build attestation этого репозитория до того, как бинарь будет
 запущен или попадёт в `PATH`.
diff --git a/docs/runbook.md b/docs/runbook.md
index 5e7f856..86af846 100644
--- a/docs/runbook.md
+++ b/docs/runbook.md
@@ -361,9 +361,9 @@ On Apple Silicon this runs under emulation — every `openwrt/sdk` tag is
 In a package repository, with no `owlab.yaml`:
 
 ```yaml
-- uses: owfeed/owlab/setup@v0.5.6
+- uses: owfeed/owlab/setup@v0.6.0
 - run: owlab build --release 25.12.5 --out dist
-- uses: owfeed/owlab/action@v0.5.6
+- uses: owfeed/owlab/action@v0.6.0
   with:
     releases: "25.12.5 24.10.8"
     install: dist/*/luci-app-mine-*
diff --git a/docs/runbook_ru.md b/docs/runbook_ru.md
index 72d93c0..ca2564f 100644
--- a/docs/runbook_ru.md
+++ b/docs/runbook_ru.md
@@ -360,9 +360,9 @@ sync — нет, и на этой разнице ломались пакеты,
 В репозитории пакета, без всякого `owlab.yaml`:
 
 ```yaml
-- uses: owfeed/owlab/setup@v0.5.6
+- uses: owfeed/owlab/setup@v0.6.0
 - run: owlab build --release 25.12.5 --out dist
-- uses: owfeed/owlab/action@v0.5.6
+- uses: owfeed/owlab/action@v0.6.0
   with:
     releases: "25.12.5 24.10.8"
     install: dist/*/luci-app-mine-*
diff --git a/examples/workflow/package-ci.yml b/examples/workflow/package-ci.yml
index 428d178..14ab911 100644
--- a/examples/workflow/package-ci.yml
+++ b/examples/workflow/package-ci.yml
@@ -32,7 +32,7 @@ jobs:
 
       # Pin the tag. "latest" means a CI result can change without a commit
       # anywhere in this repository.
-      - uses: owfeed/owlab/setup@v0.5.6
+      - uses: owfeed/owlab/setup@v0.6.0
 
       # The verification tier: luci.mk minifies JS and CSS by default, so a real
       # package is not the source tree. Code that works unminified and breaks
@@ -41,7 +41,7 @@ jobs:
       - name: Build the package
         run: owlab build --release '${{ matrix.release }}' --out dist
 
-      - uses: owfeed/owlab/action@v0.5.6
+      - uses: owfeed/owlab/action@v0.6.0
         with:
           releases: ${{ matrix.release }}
           # A glob, because the version in the artifact's file name comes from