diff --git a/CHANGELOG.md b/CHANGELOG.md
index e61d4f0..bb44028 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -7,18 +7,46 @@ fixes, minor for features.
 
 ## [Unreleased]
 
+## [0.6.0] - 2026-10-05
+
+### Added
+
+- New `pollIntervalMs` option (default `5000`): interval of the mtime poll
+  backing the file watcher when `watch` is on. `0` disables the poll (not
+  recommended). (`78134e8`)
+- Generate CHANGELOG.md during npm version, release notes from changelog (`2be4ce0`)
+- Dedupe generated entries against curated lines and repeated subjects (#7) (`401086d`)
+
 ### Fixed
 
 - Hot reload could permanently miss an edit when the OS dropped the
   file-watch event — observed with FSEvents on loaded macOS CI runners,
   where no event arrived within 60 s. The event watcher is now backed by a
-  low-frequency mtime poll (default 5 s; new `pollIntervalMs` option), so a
-  dropped event degrades to a few seconds' delay instead of a missed reload
-  until restart. (`78134e8`)
+  low-frequency mtime poll, so a dropped event degrades to a few seconds'
+  delay instead of a missed reload until restart. (`78134e8`)
 - Unit tests are now hermetic on machines that export ambient
   `XDG_*`/`OPENCODE_*` variables: the test entry point strips them, and the
   inline-content rescan test pins its scan input. (`8bdfe06`, `d0cb49f`)
 
+### Documentation
+
+- Add CHANGELOG.md and link it from both READMEs (`b49f329`)
+- Sync contributor docs with changelog automation and weekly CI (`0a1b658`)
+- State tested platforms — badge plus a line in Install (`a7b86f8`)
+- Close gaps in the PR/release workflow writeup (#5) (`b039192`)
+
+### Internal
+
+- Weekly e2e against latest hosts for upstream drift detection (`c0c6de4`)
+- Add macOS to unit and e2e matrices; slim README Development sections (`66cee07`)
+- Bump http-cache-semantics to 4.3.0 (GHSA-ch52-4w7c-c8xp, via npm audit fix) (`31230b0`)
+- Normalize lockfile resolved hosts to npmmirror (`dc60ac6`)
+- Harden workflows — SHA-pin actions, least-privilege tokens, dependabot, CodeQL (`8126660`)
+- Add single 'gate' check context for the upcoming PR-gated main (#3) (`301f1d2`)
+- Bump actions/checkout from 6.1.0 to 7.0.1 (#1) (`68a9cd5`)
+- Bump actions/setup-node from 6.5.0 to 7.0.0 (#2) (`dec0481`)
+- Platform-scaled hot-reload waitFor ceiling (darwin 60s, others 15s) (#4) (`59194ba`)
+
 ## [0.5.0] - 2026-10-04
 
 ### Added
@@ -87,7 +115,8 @@ First public release.
 - Windows: platform-aware `~\` expansion, npm via `cmd.exe` in the e2e
   harness.
 
-[Unreleased]: https://github.com/bytesnail/opencode-secrets-env/compare/v0.5.0...HEAD
+[Unreleased]: https://github.com/bytesnail/opencode-secrets-env/compare/v0.6.0...HEAD
+[0.6.0]: https://github.com/bytesnail/opencode-secrets-env/compare/v0.5.0...v0.6.0
 [0.5.0]: https://github.com/bytesnail/opencode-secrets-env/compare/v0.4.5...v0.5.0
 [0.4.5]: https://github.com/bytesnail/opencode-secrets-env/compare/v0.4.4...v0.4.5
 [0.4.4]: https://github.com/bytesnail/opencode-secrets-env/commits/v0.4.4
diff --git a/package-lock.json b/package-lock.json
index a8843f8..6c99c35 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -1,12 +1,12 @@
 {
   "name": "opencode-secrets-env",
-  "version": "0.5.0",
+  "version": "0.6.0",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "opencode-secrets-env",
-      "version": "0.5.0",
+      "version": "0.6.0",
       "license": "MIT",
       "dependencies": {
         "@opencode/plugin": "^2.0.0",
diff --git a/package.json b/package.json
index 8ce9ffb..fb78b31 100644
--- a/package.json
+++ b/package.json
@@ -1,7 +1,7 @@
 {
   "$schema": "https://json.schemastore.org/package.json",
   "name": "opencode-secrets-env",
-  "version": "0.5.0",
+  "version": "0.6.0",
   "description": "OpenCode plugin that injects secrets from ~/.config/opencode/secrets.env into process.env at startup, hot-reloads them on change, and reconnects MCP servers so they pick up new values",
   "type": "module",
   "exports": {