diff --git a/.release-please-manifest.json b/.release-please-manifest.json
index e18ee07..466df71 100644
--- a/.release-please-manifest.json
+++ b/.release-please-manifest.json
@@ -1,3 +1,3 @@
 {
-  ".": "0.0.0"
+  ".": "0.1.0"
 }
diff --git a/CHANGELOG.md b/CHANGELOG.md
new file mode 100644
index 0000000..50f5054
--- /dev/null
+++ b/CHANGELOG.md
@@ -0,0 +1,17 @@
+# Changelog
+
+## 0.1.0 (2026-10-14)
+
+
+### Features
+
+* DPoP proofs and egress policy ([#2](https://github.com/parallelworks/relay/issues/2)) ([ce7d772](https://github.com/parallelworks/relay/commit/ce7d772375060421d15447da7e242ab74624c512))
+* telemetry, Helm chart, signed releases and the NIST 800-53 mapping ([#6](https://github.com/parallelworks/relay/issues/6)) ([14eca0c](https://github.com/parallelworks/relay/commit/14eca0c060140ca8fc6a20c08d08b0548f31f5ef))
+* token introspection and relay registration ([#3](https://github.com/parallelworks/relay/issues/3)) ([f708483](https://github.com/parallelworks/relay/commit/f708483e327a9225768d094ceefd657fae4a61ba))
+* tunnel client and the benchmark gate ([#5](https://github.com/parallelworks/relay/issues/5)) ([f40ce1e](https://github.com/parallelworks/relay/commit/f40ce1e35136b29ee0ae352207bfa9d3970cce3f))
+* tunnels, sessions, the relay server and its binary ([#4](https://github.com/parallelworks/relay/issues/4)) ([cc8d7cd](https://github.com/parallelworks/relay/commit/cc8d7cd7ab1f161c1eb3740576db288dbe13da33))
+
+
+### Bug Fixes
+
+* an observer told a tunnel closed could still see its session open ([#8](https://github.com/parallelworks/relay/issues/8)) ([aa82e69](https://github.com/parallelworks/relay/commit/aa82e69c88b1c255255bd32d9d4120bb79ff6eae))
diff --git a/compliance/component-definition.json b/compliance/component-definition.json
index e054b8b..d1e7f07 100644
--- a/compliance/component-definition.json
+++ b/compliance/component-definition.json
@@ -4,7 +4,7 @@
     "metadata": {
       "title": "relay",
       "last-modified": "2026-10-13T00:00:00Z",
-      "version": "0.0.0",
+      "version": "0.1.0",
       "oscal-version": "1.1.3",
       "roles": [
         {
diff --git a/deploy/helm/relay/Chart.yaml b/deploy/helm/relay/Chart.yaml
index 2fb85fb..0cb2c6d 100644
--- a/deploy/helm/relay/Chart.yaml
+++ b/deploy/helm/relay/Chart.yaml
@@ -1,10 +1,12 @@
 apiVersion: v2
 name: relay
-description: An authenticated TCP relay for HTTP CONNECT tunnels authorized by DPoP-bound OAuth tokens.
+description: >-
+  An authenticated TCP relay for HTTP CONNECT tunnels authorized by DPoP-bound
+  OAuth tokens.
 type: application
 version: 0.1.0
-appVersion: "0.1.0"
-kubeVersion: ">=1.28.0-0"
+appVersion: 0.1.0
+kubeVersion: '>=1.28.0-0'
 home: https://github.com/parallelworks/relay
 sources:
   - https://github.com/parallelworks/relay