diff --git a/.release-please-manifest.json b/.release-please-manifest.json
index b08cc4f..bc7e4aa 100644
--- a/.release-please-manifest.json
+++ b/.release-please-manifest.json
@@ -1,3 +1,3 @@
 {
-  ".": "0.15.2"
+  ".": "0.16.0"
 }
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 2c61c9d..85bc47c 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -4,6 +4,16 @@ All notable changes to this project will be documented in this file.
 
 This project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [0.16.0](https://github.com/workos/cli/compare/v0.15.2...v0.16.0) (2026-06-02)
+
+
+### Features
+
+* add `vault run` for secure secret injection into child processes ([#167](https://github.com/workos/cli/issues/167)) ([c7db4f5](https://github.com/workos/cli/commit/c7db4f5906b372e9fa26032a43ee6b7d21e7b412))
+* CLI telemetry for all commands with centralized lifecycle ([#122](https://github.com/workos/cli/issues/122)) ([25604bd](https://github.com/workos/cli/commit/25604bdb190c86274a4086cf1a08c85de14d89ff))
+* Forward endpoint URL to migrations package ([#165](https://github.com/workos/cli/issues/165)) ([4ef2957](https://github.com/workos/cli/commit/4ef2957b1f3cd574c8852e5025b2631f1c39bb7d))
+* telemetry opt-out command + first-run notice ([#169](https://github.com/workos/cli/issues/169)) ([cb16ebb](https://github.com/workos/cli/commit/cb16ebbacc607592f438b4399cd37cbeb4311926))
+
 ## [0.15.2](https://github.com/workos/cli/compare/v0.15.1...v0.15.2) (2026-05-20)
 
 
diff --git a/package.json b/package.json
index 7d54513..6710658 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "workos",
-  "version": "0.15.2",
+  "version": "0.16.0",
   "type": "module",
   "description": "The Official Workos CLI",
   "repository": {