diff --git a/CHANGELOG.md b/CHANGELOG.md
index 84af9446d..ece005e9b 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -13,6 +13,14 @@ parallel copies under `docs/` or `scripts/notes/`. At cut time: rename
 
 ## [Unreleased]
 
+## [0.3.6] - 2026-08-27
+
+### Fixed
+
+- The default Exa-backed `web_fetch` once again enforces HTTP(S)-only URLs and
+  per-call timeouts, returns the requested markdown, text, or HTML format, and
+  preserves the native tool's public result and error semantics.
+
 ## [0.3.5] - 2026-08-27
 
 ### MCP
diff --git a/package.json b/package.json
index 52fc9cd2f..efb90ff1e 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@corbits/code",
-  "version": "0.3.5",
+  "version": "0.3.6",
   "description": "Single-process coding agent CLI built on the Interchange runtime (Bun + TypeScript)",
   "private": true,
   "license": "SEE LICENSE IN LICENSE.md",