diff --git a/CHANGELOG.md b/CHANGELOG.md
index 3e92cb5..cc4e395 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -7,6 +7,23 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [0.3.0](https://github.com/fells-code/seamless-auth-rust/compare/v0.2.1...v0.3.0) - 2026-10-25
+
+### Added
+
+- deliver account recovery notices and pass through the v0.20 recovery routes
+- refuse recovery sessions in require_auth and refresh them after enrollment
+
+### Documentation
+
+- link the governance document and license pledge
+
+### Fixed
+
+- cancel a recovery request when no owner notice was delivered
+- refuse known placeholder secrets at startup
+- *(console)* keep the API's framing and content-type headers on the console proxy
+
 ## [0.2.1](https://github.com/fells-code/seamless-auth-rust/compare/v0.2.0...v0.2.1) - 2026-10-18
 
 ### Documentation
diff --git a/Cargo.lock b/Cargo.lock
index 200b1cf..62b98dc 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -1153,7 +1153,7 @@ dependencies = [
 
 [[package]]
 name = "seamless-auth"
-version = "0.2.1"
+version = "0.3.0"
 dependencies = [
  "axum",
  "http-body-util",
diff --git a/Cargo.toml b/Cargo.toml
index 2d8fcc6..9b7f247 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "seamless-auth"
-version = "0.2.1"
+version = "0.3.0"
 edition = "2024"
 rust-version = "1.88"
 description = "Seamless Auth server adapter for Axum: cookie and bearer sessions in front of the Seamless Auth API"