diff --git a/.release-please-manifest.json b/.release-please-manifest.json
index 88f7c73..18e45d5 100644
--- a/.release-please-manifest.json
+++ b/.release-please-manifest.json
@@ -1,3 +1,3 @@
 {
-  ".": "0.1.4"
+  ".": "0.1.5"
 }
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 11feb7a..b018488 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -19,6 +19,13 @@
 - Run host scripts under `/bin/sh` so empty sandbox discovery works with a
   zsh login shell.
 
+## [0.1.5](https://github.com/GilmanLab/agentcompute/compare/v0.1.4...v0.1.5) (2026-09-16)
+
+
+### Features
+
+* **sandbox:** add operator-only persistent pins ([#46](https://github.com/GilmanLab/agentcompute/issues/46)) ([544c0b3](https://github.com/GilmanLab/agentcompute/commit/544c0b37754ff2ccdf53585468c61432082bca76))
+
 ## [0.1.4](https://github.com/GilmanLab/agentcompute/compare/v0.1.3...v0.1.4) (2026-09-16)
 
 
diff --git a/apko.yaml b/apko.yaml
index 343df8e..7e34a44 100644
--- a/apko.yaml
+++ b/apko.yaml
@@ -48,4 +48,4 @@ annotations:
   org.opencontainers.image.title: agentcompute
   org.opencontainers.image.description: agentcompute CodeMode MCP server
   org.opencontainers.image.source: https://github.com/GilmanLab/agentcompute
-  org.opencontainers.image.version: "0.1.4" # x-release-please-version
+  org.opencontainers.image.version: "0.1.5" # x-release-please-version
diff --git a/melange.yaml b/melange.yaml
index b018f17..70f6254 100644
--- a/melange.yaml
+++ b/melange.yaml
@@ -7,7 +7,7 @@
 # workflow and the `image-local` mise task), so no date math runs inside the sandbox.
 package:
   name: agentcompute
-  version: "0.1.4" # x-release-please-version
+  version: "0.1.5" # x-release-please-version
   epoch: 0
   description: agentcompute CodeMode MCP server