diff --git a/.release-please-manifest.json b/.release-please-manifest.json
index e18ee07..466df71 100644
--- a/.release-please-manifest.json
+++ b/.release-please-manifest.json
@@ -1,3 +1,3 @@
 {
-  ".": "0.0.0"
+  ".": "0.1.0"
 }
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 825c32f..ed60efc 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1 +1,27 @@
 # Changelog
+
+## 0.1.0 (2026-09-15)
+
+
+### Features
+
+* **compute:** implement Incus container sandbox slice ([#14](https://github.com/GilmanLab/agentcompute/issues/14)) ([358c572](https://github.com/GilmanLab/agentcompute/commit/358c5724bbe43a8bbfb02ff060fadec6c063bd2a))
+* **images:** add router recipe, pins, publish pipeline, and import spike ([#7](https://github.com/GilmanLab/agentcompute/issues/7)) ([0b71543](https://github.com/GilmanLab/agentcompute/commit/0b715439826b9f59c16c1294eae65d8b06930e5c))
+* **images:** bake the router NAT helper ([#20](https://github.com/GilmanLab/agentcompute/issues/20)) ([5de3ddb](https://github.com/GilmanLab/agentcompute/commit/5de3ddb269b80d5c70e8f51e8314e6537dcb5169))
+* **images:** build and qualify the Ubuntu X11 desktop VM ([#25](https://github.com/GilmanLab/agentcompute/issues/25)) ([e4333f2](https://github.com/GilmanLab/agentcompute/commit/e4333f245b4e81c8d7753038f0ddf04a620bd0a2))
+* **images:** build runner VMs and dispatch bakes to a private repository ([#17](https://github.com/GilmanLab/agentcompute/issues/17)) ([0cafbec](https://github.com/GilmanLab/agentcompute/commit/0cafbec6cd9ec875c6d41efc40355985dd05300a))
+* **images:** promote qualified lab image digests ([#19](https://github.com/GilmanLab/agentcompute/issues/19)) ([a0d6860](https://github.com/GilmanLab/agentcompute/commit/a0d68606c8bcb17313274ea2f9865969e6f3b9a6))
+* **images:** record the published router release in the catalog ([#13](https://github.com/GilmanLab/agentcompute/issues/13)) ([bc6e754](https://github.com/GilmanLab/agentcompute/commit/bc6e754c6cbe0d807ec89261cac35e1936bb2711))
+* **incus:** complete sandbox networking and lifecycle ([#22](https://github.com/GilmanLab/agentcompute/issues/22)) ([208e15c](https://github.com/GilmanLab/agentcompute/commit/208e15c78ca6b07357c170ceea71b8b635c033fb))
+* **windows:** qualify cluster-local Windows images end to end ([#28](https://github.com/GilmanLab/agentcompute/issues/28)) ([0611f31](https://github.com/GilmanLab/agentcompute/commit/0611f311adcb6a21439e473cd03d2a51cb0e580d))
+
+
+### Bug Fixes
+
+* **images:** assemble with umask 022 so generated files are not 0600 ([#12](https://github.com/GilmanLab/agentcompute/issues/12)) ([4059565](https://github.com/GilmanLab/agentcompute/commit/4059565b81b16311c11c4b84edfe1b1cfb3aa614))
+* **images:** compare the pinned Incus client version exactly ([#9](https://github.com/GilmanLab/agentcompute/issues/9)) ([ba6305f](https://github.com/GilmanLab/agentcompute/commit/ba6305fca7adc7914854234e0caac5e794bff63c))
+* **images:** drop duplicate --accept-routes from tailnet enrollment ([#10](https://github.com/GilmanLab/agentcompute/issues/10)) ([bab7107](https://github.com/GilmanLab/agentcompute/commit/bab710717b1dcb3c97c4868ead1d1c6a5c98ee45))
+* **images:** include distrobuilder VM dependency in publisher ([#18](https://github.com/GilmanLab/agentcompute/issues/18)) ([a3db6b4](https://github.com/GilmanLab/agentcompute/commit/a3db6b4ec7d8e8d54841f6261c86c25720fa4a30))
+* **images:** keep catalog updates from republishing and fix alias promotion ([#11](https://github.com/GilmanLab/agentcompute/issues/11)) ([8fcc4f7](https://github.com/GilmanLab/agentcompute/commit/8fcc4f7262d3849f66c5cefaaa76f701c97c99a6))
+
+## Changelog
diff --git a/apko.yaml b/apko.yaml
index d571281..f183c34 100644
--- a/apko.yaml
+++ b/apko.yaml
@@ -48,4 +48,4 @@ annotations:
   org.opencontainers.image.title: agentcompute
   org.opencontainers.image.description: agentcompute CodeMode MCP server
   org.opencontainers.image.source: https://github.com/GilmanLab/agentcompute
-  org.opencontainers.image.version: "0.0.0" # x-release-please-version
+  org.opencontainers.image.version: "0.1.0" # x-release-please-version
diff --git a/melange.yaml b/melange.yaml
index 3aa0191..9139a91 100644
--- a/melange.yaml
+++ b/melange.yaml
@@ -7,7 +7,7 @@
 # workflow and the `image-local` mise task), so no date math runs inside the sandbox.
 package:
   name: agentcompute
-  version: "0.0.0" # x-release-please-version
+  version: "0.1.0" # x-release-please-version
   epoch: 0
   description: agentcompute CodeMode MCP server