diff --git a/CHANGELOG.md b/CHANGELOG.md
index 9de2bd2..2651aee 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -7,6 +7,48 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [0.5.0](https://github.com/tarka/vicarian/compare/v0.4.0...v0.5.0) - 2026-09-17
+
+### <!-- 0 -->Features
+
+- *(tls)* Add comments and clarifications of the dummy/noop cert handler.
+- *(rustls)* Move to Pingora 0.9 and enable rustls
+- Convert to use Rustls Pingora backend
+
+### <!-- 3 -->Documentation
+
+- Update status of project.
+
+### Other
+
+- Remove redundant async from redirector.
+- COMPRESSIBLE should be static not consts, and minor cleanups.
+- Remove phf.
+- Simplify looking up ACME profile parameters.
+- Update tlsserver validity days
+- Cleanup HSTS and Via handling in static.
+- Break large closure in acme.rs into new() fn.
+- Remove unnecessary .expect()
+- Dedup some destructuring code.
+- Dependency update
+- Minor formatting.
+- Better name for `from` in HostCertificate
+- Use Authority from the http crate to parse out hostname/port.
+- Clean-up and de-dup mimetype handling
+- Convert metrics initialisation to be more data-driven.
+- Minor coding style cleanups from review.
+- Remove unnecessary collection of hostnames into a Vec
+- Use unicase for certificate host lookups.
+- Simplify validate_path() logic.
+- Remove unnecessary .clone()
+- Use unicase to handle case-insensitive host matching
+- Remove unnecessary usage of tracing-log
+- Use a standard hashmap for route_by_host as we never update after startup.
+- Simplify some startup data conversions.
+- Enable port 80 by default (principle of least surprise).
+- Cleanup after rustls rework
+- Fix some incorrect context strings.
+
 ## [0.4.0](https://github.com/tarka/vicarian/compare/v0.3.4...v0.4.0) - 2026-09-09
 
 This release changes the configuration language from Corn to a HCL-derived DSL. An annotated reference config file is available in example/vicarian-full.hcl.
diff --git a/Cargo.lock b/Cargo.lock
index 81421e0..0968cfd 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -4720,7 +4720,7 @@ checksum = "0b928f33d975fc6ad9f86c8f283853ad26bdd5b10b7f1542aa2fa15e2289105a"
 
 [[package]]
 name = "vicarian"
-version = "0.4.0"
+version = "0.5.0"
 dependencies = [
  "anyhow",
  "async-trait",
diff --git a/Cargo.toml b/Cargo.toml
index 00d7f60..a4361ca 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -1,7 +1,7 @@
 [package]
 name = "vicarian"
 description = "Vicarian is a TLS-first reverse-proxy server with ACME support"
-version = "0.4.0"
+version = "0.5.0"
 edition = "2024"
 
 authors = ["Steve Smith <tarkasteve@gmail.com>"]