diff --git a/.release-please-manifest.json b/.release-please-manifest.json
index 5154451..1793453 100644
--- a/.release-please-manifest.json
+++ b/.release-please-manifest.json
@@ -1,3 +1,3 @@
 {
-    ".": "0.6.2"
+    ".": "0.6.3"
 }
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 8773a5e..bd55f33 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,5 +1,12 @@
 # Changelog
 
+## [0.6.3](https://github.com/StackOneHQ/defender/compare/defender-v0.6.2...defender-v0.6.3) (2026-04-23)
+
+
+### Bug Fixes
+
+* **ENG-12707, ENG-12708:** make boundary annotation opt-in (annotateBoundary flag) ([#57](https://github.com/StackOneHQ/defender/issues/57)) ([bf10849](https://github.com/StackOneHQ/defender/commit/bf10849dcc6226c6d29b1c043a0cc9069a152d24))
+
 ## [0.6.2](https://github.com/StackOneHQ/defender/compare/defender-v0.6.1...defender-v0.6.2) (2026-04-21)
 
 
diff --git a/package-lock.json b/package-lock.json
index 8d3e6bb..5d1f21c 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -1,12 +1,12 @@
 {
     "name": "@stackone/defender",
-    "version": "0.6.2",
+    "version": "0.6.3",
     "lockfileVersion": 3,
     "requires": true,
     "packages": {
         "": {
             "name": "@stackone/defender",
-            "version": "0.6.2",
+            "version": "0.6.3",
             "license": "Apache-2.0",
             "dependencies": {
                 "nanoid": "3.3.11"
diff --git a/package.json b/package.json
index 8803ff3..01ad590 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
     "name": "@stackone/defender",
-    "version": "0.6.2",
+    "version": "0.6.3",
     "description": "Prompt injection defense framework for AI tool-calling",
     "main": "dist/index.cjs",
     "module": "dist/index.mjs",