diff --git a/README.md b/README.md
index 3ca331a..ae4b1c0 100644
--- a/README.md
+++ b/README.md
@@ -25,7 +25,7 @@ bootstraps).
 default_install_hook_types: [pre-commit, commit-msg, pre-merge-commit, pre-push]
 repos:
   - repo: https://github.com/HackingGate/uphold
-    rev: v1.5.0
+    rev: v1.6.0
     hooks:
       - id: uphold-check            # the claims still hold
       - id: uphold-scan             # the content policy
@@ -48,13 +48,13 @@ the binary must be on PATH.
 # lefthook.yml
 remotes:
   - git_url: https://github.com/HackingGate/uphold
-    ref: v1.5.0
+    ref: v1.6.0
     configs:
       - hooks/lefthook.yml
 ```
 
 ```sh
-cargo install --git https://github.com/HackingGate/uphold --tag v1.5.0
+cargo install --git https://github.com/HackingGate/uphold --tag v1.6.0
 ```
 
 That `ref:` is the one version a lefthook consumer pins, and **Dependabot does
diff --git a/hooks/lefthook.yml b/hooks/lefthook.yml
index 7546c1d..0abdbe0 100644
--- a/hooks/lefthook.yml
+++ b/hooks/lefthook.yml
@@ -10,7 +10,7 @@
 #   # lefthook.yml, in the consuming repository
 #   remotes:
 #     - git_url: https://github.com/HackingGate/uphold
-#       ref: v1.5.0
+#       ref: v1.6.0
 #       configs:
 #         - hooks/lefthook.yml
 #
@@ -21,7 +21,7 @@
 # their manifest contract; lefthook runs commands and has no such contract, so
 # `uphold` must be on PATH:
 #
-#   cargo install --git https://github.com/HackingGate/uphold --tag v1.5.0
+#   cargo install --git https://github.com/HackingGate/uphold --tag v1.6.0
 #
 # The names below are prefixed `uphold-` on purpose. A remote config is
 # merged into the consumer's own, and two commands sharing a name under one hook