diff --git a/.release-please-manifest.json b/.release-please-manifest.json
index 2b50915f..c4f9eeec 100644
--- a/.release-please-manifest.json
+++ b/.release-please-manifest.json
@@ -1,3 +1,3 @@
 {
-  ".": "10.6.0"
+  ".": "10.6.1"
 }
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 62dc2f63..cdf58a33 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,5 +1,12 @@
 # Changelog
 
+## [10.6.1](https://github.com/workos/workos-ruby/compare/v10.6.0...v10.6.1) (2026-11-06)
+
+
+### Bug Fixes
+
+* **session:** Reject non-user access tokens in session cookies ([#573](https://github.com/workos/workos-ruby/issues/573)) ([94be822](https://github.com/workos/workos-ruby/commit/94be82279e19a25d7e0fe4f1a6ce0aaad5c9dfaf))
+
 ## [10.6.0](https://github.com/workos/workos-ruby/compare/v10.5.0...v10.6.0) (2026-11-04)
 
 ### Bug Fixes
diff --git a/Gemfile.lock b/Gemfile.lock
index 76e162eb..b66744b0 100644
--- a/Gemfile.lock
+++ b/Gemfile.lock
@@ -1,7 +1,7 @@
 PATH
   remote: .
   specs:
-    workos (10.6.0)
+    workos (10.6.1)
       jwt (~> 3.1)
       logger (~> 1.7)
       zeitwerk (~> 2.6)
@@ -153,7 +153,7 @@ CHECKSUMS
   unicode-emoji (4.2.0) sha256=519e69150f75652e40bf736106cfbc8f0f73aa3fb6a65afe62fefa7f80b0f80f
   webmock (3.26.2) sha256=774556f2ea6371846cca68c01769b2eac0d134492d21f6d0ab5dd643965a4c90
   webrick (1.9.2) sha256=beb4a15fc474defed24a3bda4ffd88a490d517c9e4e6118c3edce59e45864131
-  workos (10.6.0)
+  workos (10.6.1)
   yard (0.9.45) sha256=52e211493f7cb8a3ebf7e104a25a1e73937a3103092545d34cb88fafebb3dc51
   yard-markdown (0.9.1) sha256=51adf55a814172f70ed81fbd1af4dc42c0e1a698915f7da33eff5a3bb527062d
   zeitwerk (2.7.5) sha256=d8da92128c09ea6ec62c949011b00ed4a20242b255293dd66bf41545398f73dd
diff --git a/lib/workos/version.rb b/lib/workos/version.rb
index 4f85cf36..b8e3a53c 100644
--- a/lib/workos/version.rb
+++ b/lib/workos/version.rb
@@ -2,5 +2,5 @@
 
 # @oagen-ignore-file
 module WorkOS
-  VERSION = "10.6.0"
+  VERSION = "10.6.1"
 end