diff --git a/.badges.json b/.badges.json
index 8268581..8c2766f 100644
--- a/.badges.json
+++ b/.badges.json
@@ -4,7 +4,7 @@
     {
       "fileName": "version.svg",
       "label": "npm",
-      "status": "1.4.0",
+      "status": "1.6.0",
       "icon": "npm"
     }
   ]
diff --git a/.github/badges/version.svg b/.github/badges/version.svg
index d19adc3..cf1fb67 100644
--- a/.github/badges/version.svg
+++ b/.github/badges/version.svg
@@ -1,20 +1,20 @@
-<svg width="89.9" height="20" viewBox="0 0 899 200" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" role="img" aria-label="npm: 1.4.0">
-  <title>npm: 1.4.0</title>
-  <linearGradient id="kAyAb" x2="0" y2="100%">
+<svg width="89.9" height="20" viewBox="0 0 899 200" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" role="img" aria-label="npm: 1.6.0">
+  <title>npm: 1.6.0</title>
+  <linearGradient id="hbagj" x2="0" y2="100%">
     <stop offset="0" stop-opacity=".1" stop-color="#EEE"/>
     <stop offset="1" stop-opacity=".1"/>
   </linearGradient>
-  <mask id="sxYio"><rect width="899" height="200" rx="30" fill="#FFF"/></mask>
-  <g mask="url(#sxYio)">
+  <mask id="xWCku"><rect width="899" height="200" rx="30" fill="#FFF"/></mask>
+  <g mask="url(#xWCku)">
     <rect width="509" height="200" fill="#555555"/>
     <rect width="390" height="200" fill="#066fef" x="509"/>
-    <rect width="899" height="200" fill="url(#kAyAb)"/>
+    <rect width="899" height="200" fill="url(#hbagj)"/>
   </g>
   <g aria-hidden="true" fill="#fff" text-anchor="start" font-family="Verdana,DejaVu Sans,sans-serif" font-size="110">
     <text x="220" y="148" textLength="249" fill="#000" opacity="0.25">npm</text>
     <text x="210" y="138" textLength="249">npm</text>
-    <text x="564" y="148" textLength="290" fill="#000" opacity="0.25">1.4.0</text>
-    <text x="554" y="138" textLength="290">1.4.0</text>
+    <text x="564" y="148" textLength="290" fill="#000" opacity="0.25">1.6.0</text>
+    <text x="554" y="138" textLength="290">1.6.0</text>
   </g>
   <image x="40" y="35" width="130" height="130" xlink:href="data:image/svg+xml;base64,PHN2ZyB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciIHZpZXdCb3g9IjAgMCA0MCA0MCI+PHBhdGggZD0iTTAgMGg0MHY0MEgwVjB6IiBmaWxsPSIjY2IwMDAwIi8+PHBhdGggZmlsbD0iI2ZmZiIgZD0iTTcgN2gyNnYyNmgtN1YxNGgtNnYxOUg3eiIvPjwvc3ZnPg=="/>
 </svg>
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 5dccd2c..24c1f30 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,3 +1,26 @@
+# 1.6.0 (2026-07-01)
+
+### 🔀 Pull Requests
+
+- [RBAC support — four plugin permissions + admin route gates (LOC-4200) #127](https://github.com/localazy/strapi-plugin/pull/127)
+
+### ✨ Features
+
+- RBAC support — register four plugin permissions + gate all admin routes (LOC-4200) ([d06cd79](https://github.com/localazy/strapi-plugin/commit/d06cd79)) ([#127](https://github.com/localazy/strapi-plugin/pull/127))
+
+### 🐛 Bug Fixes
+
+- address David's RBAC follow-ups on LOC-4200 ([d06cd79](https://github.com/localazy/strapi-plugin/commit/d06cd79)) ([#127](https://github.com/localazy/strapi-plugin/pull/127))
+- drop category from plugins-section RBAC actions so they register (LOC-4200) ([d06cd79](https://github.com/localazy/strapi-plugin/commit/d06cd79)) ([#127](https://github.com/localazy/strapi-plugin/pull/127))
+- gate destructive plugin-settings PUT behind settings.update (LOC-4200) ([d06cd79](https://github.com/localazy/strapi-plugin/commit/d06cd79)) ([#127](https://github.com/localazy/strapi-plugin/pull/127))
+- gate settings routes and webhook-author select by RBAC (LOC-4200) ([d06cd79](https://github.com/localazy/strapi-plugin/commit/d06cd79)) ([#127](https://github.com/localazy/strapi-plugin/pull/127))
+- send Download ui-languages with transfer request (LOC-4200) ([d06cd79](https://github.com/localazy/strapi-plugin/commit/d06cd79)) ([#127](https://github.com/localazy/strapi-plugin/pull/127))
+- surface all four RBAC permissions in the Plugins tab (LOC-4200) ([d06cd79](https://github.com/localazy/strapi-plugin/commit/d06cd79)) ([#127](https://github.com/localazy/strapi-plugin/pull/127))
+
+### 🧰 Other Commits
+
+- trim verbose RBAC code comments (LOC-4200) ([d06cd79](https://github.com/localazy/strapi-plugin/commit/d06cd79)) ([#127](https://github.com/localazy/strapi-plugin/pull/127))
+
 # 1.4.0 (2026-05-13)
 
 ### 🔀 Pull Requests
diff --git a/package-lock.json b/package-lock.json
index a3f0ce7..956fb49 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -1,12 +1,12 @@
 {
   "name": "@localazy/strapi-plugin",
-  "version": "1.5.0",
+  "version": "1.6.0",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@localazy/strapi-plugin",
-      "version": "1.5.0",
+      "version": "1.6.0",
       "license": "MIT",
       "dependencies": {
         "jszip": "^3.10.1",
diff --git a/package.json b/package.json
index bf651f8..877f70c 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@localazy/strapi-plugin",
-  "version": "1.5.0",
+  "version": "1.6.0",
   "description": "The official Strapi Plugin by Localazy.",
   "keywords": [
     "strapi",