diff --git a/CHANGELOG.md b/CHANGELOG.md
index cddf9545..e0cf11ca 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -5,6 +5,25 @@ All notable changes to the Nextcloud MCP Server will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [PEP 440](https://peps.python.org/pep-0440/).
 
+## v0.90.0 (2026-05-29)
+
+### Feat
+
+- **search**: ACL-aware vector filter via Nextcloud Shares lookup
+
+### Fix
+
+- PR #813 review — cap unified_search multi-type pool; document deck self-only
+- cache app-password storage to avoid per-request Alembic upgrade race
+- PR #813 review — shared-file context in MCP tool path + viz over-fetch cap
+- address PR #813 review round 4 (log leak, cross-user chunk ctx, algo, overlap)
+- address PR #813 latest review (ACL-aware doc-type discovery, robustness)
+- address PR #813 review (owner_id index, cache bound, explicit param)
+- **search**: address PR #813 review (viz verify-on-read, owners cache, docs)
+- **auth**: make provision/revoke consistent with the app-password store
+- **auth**: login-flow provisioning — public login_url + session app passwords
+- **search**: verify shared files by global file id (ACL-aware)
+
 ## v0.89.0 (2026-05-24)
 
 ### Feat
diff --git a/pyproject.toml b/pyproject.toml
index a210ae60..7c6e0eb3 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -1,6 +1,6 @@
 [project]
 name = "nextcloud-mcp-server"
-version = "0.89.0"
+version = "0.90.0"
 description = "Model Context Protocol (MCP) server for Nextcloud integration - enables AI assistants to interact with Nextcloud data"
 authors = [
     {name = "Chris Coutinho", email = "chris@coutinho.io"}
diff --git a/uv.lock b/uv.lock
index b097f068..58b81cb0 100644
--- a/uv.lock
+++ b/uv.lock
@@ -2171,7 +2171,7 @@ wheels = [
 
 [[package]]
 name = "nextcloud-mcp-server"
-version = "0.89.0"
+version = "0.90.0"
 source = { editable = "." }
 dependencies = [
     { name = "aiosqlite" },