diff --git a/Makefile b/Makefile
index 2eea6104..a2d2e98a 100644
--- a/Makefile
+++ b/Makefile
@@ -1,4 +1,4 @@
-VERSION ?= 0.6
+VERSION ?= 0.7
 
 BINS += bin/sbsign.safeboot
 BINS += bin/sign-efi-sig-list.safeboot
diff --git a/debian/changelog b/debian/changelog
index dde34836..59c2e3df 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,3 +1,14 @@
+safeboot (0.7) unstable; urgency=medium
+
+  * Added signed PCRs
+  * Added TPM counters for rollback protection
+  * safeboot.conf is now included in the initrd, fewer params on command line
+  * Recovery boot can now sign and hash root filesystem
+  * Helpers for recovery boot to unlock cryptdisk, mount filesystems, etc
+  * No more perl in /sbin/safeboot
+
+ -- Trammell Hudson <hudson@unicycle>  Sun, 23 Aug 2020 18:12:58 +0200
+
 safeboot (0.6) unstable; urgency=medium
 
   * Lots of documentation updates
diff --git a/docs/install.md b/docs/install.md
index 62d9ea95..a448850c 100644
--- a/docs/install.md
+++ b/docs/install.md
@@ -32,8 +32,8 @@ Releases for the the safeboot Debian package are in [safeboot/releases](https://
 * Resizing '/' to 8GB during the install if you want to enable SIP
 
 ```
-wget https://github.com/osresearch/safeboot/releases/download/release-0.6/safeboot_0.6_amd64.deb
-sudo apt install safeboot_0.6_amd64.deb
+wget https://github.com/osresearch/safeboot/releases/download/release-0.7/safeboot_0.7_amd64.deb
+sudo apt install safeboot_0.7_amd64.deb
 sudo update-initramfs -u
 sudo safeboot yubikey-init /CN=foo/ # or safeboot key-init if you don't have a token
 sudo safeboot uefi-sign-keys