diff --git a/CHANGELOG.md b/CHANGELOG.md
index 687378c..18e5cf8 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -7,6 +7,18 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [0.36.42](https://github.com/azerozero/grob/compare/v0.36.41...v0.36.42) - 2026-04-28
+
+### Fixed
+
+- *(providers)* tool-use translation correctness (3 audit bugs)
+
+### Other
+
+- *(translation)* table-driven tests for Anthropic <-> OpenAI <-> Responses translation ([#334](https://github.com/azerozero/grob/pull/334))
+- *(security)* multi-tenant isolation integration tests ([#326](https://github.com/azerozero/grob/pull/326))
+- *(providers)* document Z.ai/GLM dual-endpoint model, no glm.rs needed
+
 ### Lifecycle roadmap (no code yet — design only)
 
 - ADR-0008 promoted from `proposed` to `accepted` (2026-04-28). Unblocks chantiers A-1 (ControlEngine) and A-2 (CLI thin).
diff --git a/Cargo.lock b/Cargo.lock
index fe5b3eb..96b5dab 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -1872,7 +1872,7 @@ dependencies = [
 
 [[package]]
 name = "grob"
-version = "0.36.41"
+version = "0.36.42"
 dependencies = [
  "aes-gcm",
  "age",
diff --git a/Cargo.toml b/Cargo.toml
index de3e639..4a901ff 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "grob"
-version = "0.36.41"
+version = "0.36.42"
 edition = "2021"
 license = "AGPL-3.0-only"
 description = "High-performance LLM routing proxy — routes to Anthropic, OpenAI, Gemini, DeepSeek, Ollama & more with streaming, tool calling, and multi-provider fallback"