diff --git a/changelogs/2.6.0.md b/changelogs/2.6.0.md
new file mode 100644
index 0000000..f3f7e55
--- /dev/null
+++ b/changelogs/2.6.0.md
@@ -0,0 +1,18 @@
+# 2.6.0
+
+## Added
+
+- Document API-key creation, capabilities, workspace scoping, expiry, revocation, and CI authentication with `KUBER_API_TOKEN` in the README.
+- Show per-image build lifecycle and output in `up` tasks, including clearer build failure details.
+- Publish equivalent service builds to multiple image destinations without repeating the BuildKit build.
+
+## Changed
+
+- Allow `kuber users keys ls` without a username to list keys across users; pass a username to filter the list.
+- Clarify the positional username and capability examples for `kuber users keys create`; use `--expires-days none` for a key that never expires.
+- Report Kubernetes build phases from the Job's pod and BuildKit container status, distinguishing creation, startup, and running.
+- Show database reconciliation under backing-service deployment tasks, with clearer failure context that omits sensitive provider details.
+
+## Fixed
+
+- Reject invalid image references before resolving registry digests.
diff --git a/command/main.ts b/command/main.ts
index 3ef49f1..4e1e2b1 100644
--- a/command/main.ts
+++ b/command/main.ts
@@ -37,7 +37,7 @@ function cloneCommand<T extends object>(command: T): T {
 export const main = defineCommand({
   meta: {
     name: "kuber",
-    version: "2.5.2",
+    version: "2.6.0",
     description: "Docker Compose -> K8s translation layer",
   },
   args: {
diff --git a/package.json b/package.json
index 517e039..31c6860 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@dmgnr/kuber",
-  "version": "2.5.2",
+  "version": "2.6.0",
   "description": "Docker Compose to Kubernetes translation layer",
   "bin": {
     "kuber": "dist/index.js"