diff --git a/.release-please-manifest.json b/.release-please-manifest.json
index 84541506..7731f20e 100644
--- a/.release-please-manifest.json
+++ b/.release-please-manifest.json
@@ -1,3 +1,3 @@
 {
-  ".": "2.15.1"
+  ".": "2.16.0"
 }
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 69475455..199b85fc 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,5 +1,18 @@
 # Changelog
 
+## [2.16.0](https://github.com/HitKeep/hitkeep/compare/v2.15.1...v2.16.0) (2026-11-02)
+
+
+### Features
+
+* enable consented agent actions and canonical discovery ([#449](https://github.com/HitKeep/hitkeep/issues/449)) ([523ca03](https://github.com/HitKeep/hitkeep/commit/523ca0334aa39ef3c9a8a333c21f1f20a1ebbd65))
+
+
+### Bug Fixes
+
+* harden CI results, run cleanup, and release authentication ([#432](https://github.com/HitKeep/hitkeep/issues/432)) ([8c3e13e](https://github.com/HitKeep/hitkeep/commit/8c3e13e5f55581e886d479a9af53a567bffd7308))
+* identify Auth.md in the Cloud discovery heading ([#450](https://github.com/HitKeep/hitkeep/issues/450)) ([5d5262d](https://github.com/HitKeep/hitkeep/commit/5d5262d9124dc17abe615099a003c9cd8bd685c1))
+
 ## [2.15.1](https://github.com/HitKeep/hitkeep/compare/v2.15.0...v2.15.1) (2026-10-28)
 
 
diff --git a/charts/hitkeep/Chart.yaml b/charts/hitkeep/Chart.yaml
index 40684c37..011384c1 100644
--- a/charts/hitkeep/Chart.yaml
+++ b/charts/hitkeep/Chart.yaml
@@ -4,5 +4,5 @@ description: >-
   Privacy-first analytics for humans and AI agents, self-hosted or in EU/US
   cloud.
 type: application
-version: 2.15.1
-appVersion: 2.15.1
+version: 2.16.0
+appVersion: 2.16.0
diff --git a/charts/hitkeep/README.md b/charts/hitkeep/README.md
index 64542770..06093a53 100644
--- a/charts/hitkeep/README.md
+++ b/charts/hitkeep/README.md
@@ -168,7 +168,7 @@ persistence:
 
 ### Optional MCP and AI configuration
 
-HitKeep 2.15.1 can expose the read-only MCP endpoint, optional AI-backed Opportunity features, and the optional Ask AI dashboard assistant when you configure them explicitly. <!-- x-release-please-version -->
+HitKeep 2.16.0 can expose the read-only MCP endpoint, optional AI-backed Opportunity features, and the optional Ask AI dashboard assistant when you configure them explicitly. <!-- x-release-please-version -->
 
 ```
 env:
diff --git a/frontend/dashboard/package-lock.json b/frontend/dashboard/package-lock.json
index e5b48604..18a2e183 100644
--- a/frontend/dashboard/package-lock.json
+++ b/frontend/dashboard/package-lock.json
@@ -4,7 +4,7 @@
   "packages": {
     "": {
       "name": "@hitkeep/dashboard",
-      "version": "2.15.1",
+      "version": "2.16.0",
       "license": "MIT",
       "packageExtensionsHash": "sha512-tDlRDe6fk4Egj6acEVQrp1vw1nzykcO1AnCsoqlZqnBfZzwZjeRzvTE7S8uGF6UEVoKlTg0XY9MXQzpCZ5/qLw==",
       "dependencies": {
diff --git a/frontend/dashboard/package.json b/frontend/dashboard/package.json
index 4d30cb6a..8fd797bc 100644
--- a/frontend/dashboard/package.json
+++ b/frontend/dashboard/package.json
@@ -1,7 +1,7 @@
 {
     "name": "@hitkeep/dashboard",
     "license": "MIT",
-    "version": "2.15.1",
+    "version": "2.16.0",
     "packageManager": "npm@12.2.1",
     "scripts": {
         "ng": "ng",
diff --git a/frontend/dashboard/src/tracker/version.ts b/frontend/dashboard/src/tracker/version.ts
index 6c5b0150..9a4e10f3 100644
--- a/frontend/dashboard/src/tracker/version.ts
+++ b/frontend/dashboard/src/tracker/version.ts
@@ -1 +1 @@
-export const TRACKER_VERSION = '2.15.1'; // x-release-please-version
+export const TRACKER_VERSION = '2.16.0'; // x-release-please-version
diff --git a/frontend/tracker/package.json b/frontend/tracker/package.json
index 268cb812..44c68485 100644
--- a/frontend/tracker/package.json
+++ b/frontend/tracker/package.json
@@ -1,6 +1,6 @@
 {
     "name": "@hitkeep/tracker",
-    "version": "2.15.1",
+    "version": "2.16.0",
     "description": "Typed, cookieless web analytics tracker for React, Vue, Angular, and Astro. Official browser SDK for HitKeep, a privacy-friendly, self-hostable Google Analytics alternative.",
     "license": "MIT",
     "type": "module",
diff --git a/server.json b/server.json
index 75527f47..1834a1fd 100644
--- a/server.json
+++ b/server.json
@@ -17,7 +17,7 @@
     "url": "https://github.com/HitKeep/hitkeep",
     "source": "github"
   },
-  "version": "2.15.1",
+  "version": "2.16.0",
   "remotes": [
     {
       "type": "streamable-http",