diff --git a/docs/releases/1.10.6.md b/docs/releases/1.10.6.md
new file mode 100644
index 00000000..2dcea4d2
--- /dev/null
+++ b/docs/releases/1.10.6.md
@@ -0,0 +1,32 @@
+# Kept 1.10.6
+
+Built 2026-10-17 from commit `800cf5ef727cb19b41fca6a15e0989a16f3379e0` by `scripts/release.sh` on GitHub Actions (https://github.com/keptinventory/kept/actions/runs/38991850581).
+
+## The image
+
+`ghcr.io/keptinventory/kept@sha256:32223cbd545c969bb3d6d9d24184ba70030da522b1dcbb8a5c1e0bf6a7c461d5`, for linux/amd64 and linux/arm64, each smoked by digest before any tag
+(each natively, by the workflow's build job on a runner of its own architecture) with `/version` answering 1.10.6 at this commit.
+
+| Platform | Manifest |
+|---|---|
+| linux/amd64 | `sha256:3284b49a386cadfe3aeed7542481da5531c5ddb524f9e5e3c577389928c5a95a` |
+| linux/arm64 | `sha256:9432c0e07ef24b8551d34f6862cf765ab01e74b8e79ffea69846f9364194bff8` |
+
+Tags, all pointing at that digest (there is never a `latest`):
+
+- `ghcr.io/keptinventory/kept:1.10.6`
+- `ghcr.io/keptinventory/kept:1.10`
+- `ghcr.io/keptinventory/kept:1`
+
+## The chart
+
+`oci://ghcr.io/keptinventory/charts/kept:1.10.6` (`sha256:abc865ca4472d6bb80fc578bf2d7e026e5043f9565bce4d2bba4fa22de185e40`), appVersion 1.10.6, its image pinned by the digest above.
+
+## Verify
+
+```sh
+cosign verify --key cosign.pub ghcr.io/keptinventory/kept:1.10.6
+cosign verify --key cosign.pub ghcr.io/keptinventory/charts/kept@sha256:abc865ca4472d6bb80fc578bf2d7e026e5043f9565bce4d2bba4fa22de185e40
+docker buildx imagetools inspect ghcr.io/keptinventory/kept:1.10.6 --format '{{ json .SBOM }}'   # the SPDX SBOM per platform
+```
+