diff --git a/cmd/probod/CHANGELOG.md b/cmd/probod/CHANGELOG.md
index 6942a2311..0fe94c0f3 100644
--- a/cmd/probod/CHANGELOG.md
+++ b/cmd/probod/CHANGELOG.md
@@ -4,6 +4,12 @@ All notable changes to `probod` (the server, including the bundled `@probo/conso
 
 ## Unreleased
 
+## [0.218.0] - 2026-06-23
+
+### Added
+
+- RFC 6750 `WWW-Authenticate` challenges on OAuth bearer APIs (MCP, Console and Connect GraphQL, Files, OAuth2 userinfo): responses now advertise `resource_metadata`, `invalid_token`, and `insufficient_scope` with the required scopes
+
 ## [0.217.0] - 2026-06-22
 
 ### Added
diff --git a/cmd/probod/VERSION b/cmd/probod/VERSION
index 32d48b262..db83b5008 100644
--- a/cmd/probod/VERSION
+++ b/cmd/probod/VERSION
@@ -1 +1 @@
-0.217.0
+0.218.0