diff --git a/Changelog.md b/Changelog.md
index 96b9404..f72fb13 100644
--- a/Changelog.md
+++ b/Changelog.md
@@ -1,5 +1,21 @@
 # Changelog
 
+## [0.96] - 2026-07-31
+
+- the docker image runs as any user now. It only started as root before,
+  because Inline needs a writable cache directory and the image has no
+  compiler left to build the XS part elsewhere. Deployments that run it as a
+  specific user, e.g. because the models come from an NFS export with
+  root_squash, should point `pid_file` at an absolute path outside the working
+  directory
+- fixed the docker image build, which failed since alpine moved to a gcc that
+  defaults to C23, in which the bundled isaac code of Session::Token does not
+  compile anymore
+- CI: the docker slimming uses mintoolkit, the successor of slimtoolkit, whose
+  invocation had changed; the image tarball carries the version in its name
+- `.dockerignore` did not exclude `.gitlab-ci-local`, so local image builds
+  packed the whole CI scratch directory, including job logs, into the image
+
 ## [0.95] - 2026-07-31
 
 - requires collocatordb >= 1.5.0, which fixes the leaks in the collocator
@@ -10,9 +26,6 @@
 - Devel::CheckLib, which `Makefile.PL` needs to find libcollocatordb before it
   can report the dependencies, is bundled in `inc/` now, so that a checkout
   configures without installing it first
-- fixed the docker image build, which failed since alpine moved to a gcc that
-  defaults to C23, in which the bundled isaac code of Session::Token does not
-  compile anymore
 
 ## [0.94] - 2026-07-30
 
diff --git a/script/derekovecs-server b/script/derekovecs-server
index 5d868a5..d460345 100755
--- a/script/derekovecs-server
+++ b/script/derekovecs-server
@@ -1,6 +1,6 @@
 #!/usr/bin/env perl
 
-our $VERSION = '0.95';
+our $VERSION = '0.96';
 
 use IDS::DeReKoVecs::Read;
 use Mojolicious::Lite;