diff --git a/doc/CHANGELOG.md b/doc/CHANGELOG.md
index c0d91be..fcb35ee 100644
--- a/doc/CHANGELOG.md
+++ b/doc/CHANGELOG.md
@@ -1,3 +1,14 @@
+## v3.07.00 - 2021/12/13
+- feat: add support for Duo PAM auth as MFA (#249)
+- feat: new access option: `--force-password <HASH>`, to only try one specific egress password (#256)
+- fix: add helpers handling of SIGPIPE/SIGHUP
+- fix: avoid double-close log messages on SIGHUP
+- fix: `--self-password` was missing as a `-P` synonym (#257)
+- fix: tests under OpenSUSE (fping raw sockets)
+- chore: ensure proper Getopt::Long options are set everywhere
+- chore: move HEXIT() to helper module, use HEXIT only in helpers
+- chore: factorize helpers header
+
 ## v3.06.00 - 2021/10/15
 - feat: accountModify: add --pubkey-auth-optional
 - fix: accountPIV: fix bad autocompletion rule
diff --git a/doc/sphinx/installation/upgrading.rst b/doc/sphinx/installation/upgrading.rst
index 1558fce..a9803eb 100644
--- a/doc/sphinx/installation/upgrading.rst
+++ b/doc/sphinx/installation/upgrading.rst
@@ -24,6 +24,11 @@ Note that if you're using an infrastructure automation tool such as Puppet, Ansi
 Version-specific upgrade instructions
 =====================================
 
+v3.07.00 - 2021/12/13
+*********************
+
+No specific upgrade instructions.
+
 v3.06.00 - 2021/10/15
 *********************
 
diff --git a/lib/perl/OVH/Bastion.pm b/lib/perl/OVH/Bastion.pm
index 4535f1a..e7389b2 100644
--- a/lib/perl/OVH/Bastion.pm
+++ b/lib/perl/OVH/Bastion.pm
@@ -5,7 +5,7 @@ use common::sense;
 use Fcntl;
 use POSIX qw(strftime);
 
-our $VERSION = '3.06.00';
+our $VERSION = '3.07.00';
 
 BEGIN {
     # only used by the handler below