diff --git a/.release-please-manifest.json b/.release-please-manifest.json
index 1793453..77c0d29 100644
--- a/.release-please-manifest.json
+++ b/.release-please-manifest.json
@@ -1,3 +1,3 @@
 {
-    ".": "0.6.3"
+    ".": "0.7.0"
 }
diff --git a/CHANGELOG.md b/CHANGELOG.md
index bd55f33..1afae53 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,5 +1,17 @@
 # Changelog
 
+## [0.7.0](https://github.com/StackOneHQ/defender/compare/defender-v0.6.3...defender-v0.7.0) (2026-05-14)
+
+
+### Features
+
+* **ENG-335:** multi-head ONNX + temperature scaling + API contract fixes (v0.7) ([#63](https://github.com/StackOneHQ/defender/issues/63)) ([616cc10](https://github.com/StackOneHQ/defender/commit/616cc102c8c1c633e96bfa85aa1ee5ec7727f77a))
+
+
+### Bug Fixes
+
+* **ENG-129:** add obfuscation normalisation chain to Tier 1 detection ([#39](https://github.com/StackOneHQ/defender/issues/39)) ([2544d3f](https://github.com/StackOneHQ/defender/commit/2544d3f49f07c86f2e8b2dd0b432c124264bf265))
+
 ## [0.6.3](https://github.com/StackOneHQ/defender/compare/defender-v0.6.2...defender-v0.6.3) (2026-04-23)
 
 
diff --git a/package-lock.json b/package-lock.json
index 5d1f21c..110fb3a 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -1,12 +1,12 @@
 {
     "name": "@stackone/defender",
-    "version": "0.6.3",
+    "version": "0.7.0",
     "lockfileVersion": 3,
     "requires": true,
     "packages": {
         "": {
             "name": "@stackone/defender",
-            "version": "0.6.3",
+            "version": "0.7.0",
             "license": "Apache-2.0",
             "dependencies": {
                 "nanoid": "3.3.11"
diff --git a/package.json b/package.json
index 9ea277e..e21a89f 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
     "name": "@stackone/defender",
-    "version": "0.6.3",
+    "version": "0.7.0",
     "description": "Prompt injection defense framework for AI tool-calling",
     "main": "dist/index.cjs",
     "module": "dist/index.mjs",