diff --git a/CHANGELOG.md b/CHANGELOG.md
index 1972d219f0..f2996ef20c 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,5 +1,22 @@
 # Changelog
 
+## [1.606.0](https://github.com/windmill-labs/windmill/compare/v1.605.0...v1.606.0) (2026-01-14)
+
+
+### Features
+
+* **aiagent:** handle oauth for mcp tools ([#7564](https://github.com/windmill-labs/windmill/issues/7564)) ([5c08abe](https://github.com/windmill-labs/windmill/commit/5c08abe14163dbbab2e18f2479b74c30e2a70c2f))
+* **aiagent:** handle oauth for mcp tools [merge-ee-first] ([#7544](https://github.com/windmill-labs/windmill/issues/7544)) ([e823c95](https://github.com/windmill-labs/windmill/commit/e823c953d112ab90692b17c6ed7c33645860707e))
+
+
+### Bug Fixes
+
+* **debugger:** add nsjail config for proper sandbox mounts ([31c07d9](https://github.com/windmill-labs/windmill/commit/31c07d93529f0fdb66912b42bb2d60f92ca0c333))
+* **debugger:** fix nsjail sandbox for debugger execution ([14cfce3](https://github.com/windmill-labs/windmill/commit/14cfce3fd68224d46048bbbe2f89619637c4bed2))
+* **debugger:** properly decode base64url public key from JWKS ([8d005b0](https://github.com/windmill-labs/windmill/commit/8d005b030fd73015e860ef04beb0709a04d07c65))
+* Fix wrong base_internal_url for ducklake inline ([#7563](https://github.com/windmill-labs/windmill/issues/7563)) ([b3f68ad](https://github.com/windmill-labs/windmill/commit/b3f68ad376646d7f702ba07662e320f0eb6c7717))
+* **frontend:** fix first draft save ([#7552](https://github.com/windmill-labs/windmill/issues/7552)) ([28e25ec](https://github.com/windmill-labs/windmill/commit/28e25ec60dcd73158fa2fff61c439e67478f35a0))
+
 ## [1.605.0](https://github.com/windmill-labs/windmill/compare/v1.604.0...v1.605.0) (2026-01-13)
 
 
diff --git a/backend/Cargo.lock b/backend/Cargo.lock
index 1d3e934541..3d4cc6c4a7 100644
--- a/backend/Cargo.lock
+++ b/backend/Cargo.lock
@@ -15182,7 +15182,7 @@ checksum = "712e227841d057c1ee1cd2fb22fa7e5a5461ae8e48fa2ca79ec42cfc1931183f"
 
 [[package]]
 name = "windmill"
-version = "1.605.0"
+version = "1.606.0"
 dependencies = [
  "anyhow",
  "aws-sdk-config",
@@ -15245,7 +15245,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-api"
-version = "1.605.0"
+version = "1.606.0"
 dependencies = [
  "anyhow",
  "argon2",
@@ -15368,7 +15368,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-api-client"
-version = "1.605.0"
+version = "1.606.0"
 dependencies = [
  "reqwest 0.12.28",
  "serde",
@@ -15378,7 +15378,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-audit"
-version = "1.605.0"
+version = "1.606.0"
 dependencies = [
  "chrono",
  "lazy_static",
@@ -15392,7 +15392,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-autoscaling"
-version = "1.605.0"
+version = "1.606.0"
 dependencies = [
  "anyhow",
  "axum",
@@ -15411,7 +15411,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-common"
-version = "1.605.0"
+version = "1.606.0"
 dependencies = [
  "anyhow",
  "async-recursion",
@@ -15505,7 +15505,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-git-sync"
-version = "1.605.0"
+version = "1.606.0"
 dependencies = [
  "regex",
  "serde",
@@ -15520,7 +15520,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-indexer"
-version = "1.605.0"
+version = "1.606.0"
 dependencies = [
  "anyhow",
  "astral-tokio-tar",
@@ -15544,7 +15544,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-macros"
-version = "1.605.0"
+version = "1.606.0"
 dependencies = [
  "itertools 0.14.0",
  "lazy_static",
@@ -15560,7 +15560,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-mcp"
-version = "1.605.0"
+version = "1.606.0"
 dependencies = [
  "anyhow",
  "oauth2",
@@ -15574,7 +15574,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-oauth"
-version = "1.605.0"
+version = "1.606.0"
 dependencies = [
  "anyhow",
  "async-oauth2",
@@ -15598,7 +15598,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser"
-version = "1.605.0"
+version = "1.606.0"
 dependencies = [
  "convert_case 0.6.0",
  "serde",
@@ -15607,7 +15607,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-bash"
-version = "1.605.0"
+version = "1.606.0"
 dependencies = [
  "anyhow",
  "lazy_static",
@@ -15619,7 +15619,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-csharp"
-version = "1.605.0"
+version = "1.606.0"
 dependencies = [
  "anyhow",
  "serde_json",
@@ -15631,7 +15631,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-go"
-version = "1.605.0"
+version = "1.606.0"
 dependencies = [
  "anyhow",
  "gosyn",
@@ -15643,7 +15643,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-graphql"
-version = "1.605.0"
+version = "1.606.0"
 dependencies = [
  "anyhow",
  "lazy_static",
@@ -15655,7 +15655,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-java"
-version = "1.605.0"
+version = "1.606.0"
 dependencies = [
  "anyhow",
  "serde_json",
@@ -15667,7 +15667,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-nu"
-version = "1.605.0"
+version = "1.606.0"
 dependencies = [
  "anyhow",
  "nu-parser",
@@ -15678,7 +15678,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-php"
-version = "1.605.0"
+version = "1.606.0"
 dependencies = [
  "anyhow",
  "itertools 0.14.0",
@@ -15689,7 +15689,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-py"
-version = "1.605.0"
+version = "1.606.0"
 dependencies = [
  "anyhow",
  "itertools 0.14.0",
@@ -15702,7 +15702,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-py-imports"
-version = "1.605.0"
+version = "1.606.0"
 dependencies = [
  "anyhow",
  "async-recursion",
@@ -15726,7 +15726,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-ruby"
-version = "1.605.0"
+version = "1.606.0"
 dependencies = [
  "anyhow",
  "lazy_static",
@@ -15740,7 +15740,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-rust"
-version = "1.605.0"
+version = "1.606.0"
 dependencies = [
  "anyhow",
  "convert_case 0.6.0",
@@ -15757,7 +15757,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-sql"
-version = "1.605.0"
+version = "1.606.0"
 dependencies = [
  "anyhow",
  "lazy_static",
@@ -15771,7 +15771,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-ts"
-version = "1.605.0"
+version = "1.606.0"
 dependencies = [
  "anyhow",
  "lazy_static",
@@ -15790,7 +15790,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-parser-yaml"
-version = "1.605.0"
+version = "1.606.0"
 dependencies = [
  "anyhow",
  "serde",
@@ -15801,7 +15801,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-queue"
-version = "1.605.0"
+version = "1.606.0"
 dependencies = [
  "anyhow",
  "async-recursion",
@@ -15838,7 +15838,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-sql-datatype-parser-wasm"
-version = "1.605.0"
+version = "1.606.0"
 dependencies = [
  "wasm-bindgen",
  "wasm-bindgen-test",
@@ -15848,7 +15848,7 @@ dependencies = [
 
 [[package]]
 name = "windmill-worker"
-version = "1.605.0"
+version = "1.606.0"
 dependencies = [
  "anyhow",
  "async-once-cell",
diff --git a/backend/Cargo.toml b/backend/Cargo.toml
index d20557bad7..091af15bb7 100644
--- a/backend/Cargo.toml
+++ b/backend/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "windmill"
-version = "1.605.0"
+version = "1.606.0"
 authors.workspace = true
 edition.workspace = true
 
@@ -35,7 +35,7 @@ members = [
 exclude = ["./windmill-duckdb-ffi-internal"]
 
 [workspace.package]
-version = "1.605.0"
+version = "1.606.0"
 authors = ["Ruben Fiszel <ruben@windmill.dev>"]
 edition = "2021"
 
diff --git a/backend/windmill-api/openapi.yaml b/backend/windmill-api/openapi.yaml
index 9ced1000e5..8428eeaade 100644
--- a/backend/windmill-api/openapi.yaml
+++ b/backend/windmill-api/openapi.yaml
@@ -1,7 +1,7 @@
 openapi: "3.0.3"
 
 info:
-  version: 1.605.0
+  version: 1.606.0
   title: Windmill API
 
   contact:
diff --git a/benchmarks/lib.ts b/benchmarks/lib.ts
index c02a390191..f16f465189 100644
--- a/benchmarks/lib.ts
+++ b/benchmarks/lib.ts
@@ -2,7 +2,7 @@ import { sleep } from "https://deno.land/x/sleep@v1.2.1/mod.ts";
 import * as windmill from "https://deno.land/x/windmill@v1.174.0/mod.ts";
 import * as api from "https://deno.land/x/windmill@v1.174.0/windmill-api/index.ts";
 
-export const VERSION = "v1.605.0";
+export const VERSION = "v1.606.0";
 
 export async function login(email: string, password: string): Promise<string> {
   return await windmill.UserService.login({
diff --git a/cli/src/main.ts b/cli/src/main.ts
index 1b33962408..8b8d19e108 100644
--- a/cli/src/main.ts
+++ b/cli/src/main.ts
@@ -70,7 +70,7 @@ export {
 //   }
 // });
 
-export const VERSION = "1.605.0";
+export const VERSION = "1.606.0";
 
 // Re-exported from constants.ts to maintain backwards compatibility
 export { WM_FORK_PREFIX } from "./core/constants.ts";
diff --git a/frontend/package-lock.json b/frontend/package-lock.json
index f9c5833ba2..412815a8a7 100644
--- a/frontend/package-lock.json
+++ b/frontend/package-lock.json
@@ -1,12 +1,12 @@
 {
 	"name": "windmill-components",
-	"version": "1.605.0",
+	"version": "1.606.0",
 	"lockfileVersion": 3,
 	"requires": true,
 	"packages": {
 		"": {
 			"name": "windmill-components",
-			"version": "1.605.0",
+			"version": "1.606.0",
 			"hasInstallScript": true,
 			"license": "AGPL-3.0",
 			"dependencies": {
diff --git a/frontend/package.json b/frontend/package.json
index 3b138ec3da..aa35ab38d6 100644
--- a/frontend/package.json
+++ b/frontend/package.json
@@ -1,6 +1,6 @@
 {
 	"name": "windmill-components",
-	"version": "1.605.0",
+	"version": "1.606.0",
 	"scripts": {
 		"dev": "vite dev",
 		"build": "vite build",
diff --git a/lsp/Pipfile b/lsp/Pipfile
index 447716d244..6c1080f141 100644
--- a/lsp/Pipfile
+++ b/lsp/Pipfile
@@ -4,8 +4,8 @@ verify_ssl = true
 name = "pypi"
 
 [packages]
-wmill = ">=1.605.0"
-wmill_pg = ">=1.605.0"
+wmill = ">=1.606.0"
+wmill_pg = ">=1.606.0"
 sendgrid = "*"
 mysql-connector-python = "*"
 pymongo = "*"
diff --git a/openflow.openapi.yaml b/openflow.openapi.yaml
index c8d12db2c4..430d4bc5b2 100644
--- a/openflow.openapi.yaml
+++ b/openflow.openapi.yaml
@@ -1,7 +1,7 @@
 openapi: '3.0.3'
 
 info:
-  version: 1.605.0
+  version: 1.606.0
   title: OpenFlow Spec
   contact:
     name: Ruben Fiszel
diff --git a/powershell-client/WindmillClient/WindmillClient.psd1 b/powershell-client/WindmillClient/WindmillClient.psd1
index 0f7dfc3564..ec0ceb0c6f 100644
--- a/powershell-client/WindmillClient/WindmillClient.psd1
+++ b/powershell-client/WindmillClient/WindmillClient.psd1
@@ -12,7 +12,7 @@
     RootModule        = 'WindmillClient.psm1'
 
     # Version number of this module.
-    ModuleVersion     = '1.605.0'
+    ModuleVersion     = '1.606.0'
 
     # Supported PSEditions
     # CompatiblePSEditions = @()
diff --git a/python-client/wmill/pyproject.toml b/python-client/wmill/pyproject.toml
index 13c9f0cb9f..40a7763078 100644
--- a/python-client/wmill/pyproject.toml
+++ b/python-client/wmill/pyproject.toml
@@ -1,6 +1,6 @@
 [tool.poetry]
 name = "wmill"
-version = "1.605.0"
+version = "1.606.0"
 description = "A client library for accessing Windmill server wrapping the Windmill client API"
 license = "Apache-2.0"
 homepage = "https://windmill.dev"
diff --git a/python-client/wmill_pg/pyproject.toml b/python-client/wmill_pg/pyproject.toml
index aed03a9db2..54ae7e4d12 100644
--- a/python-client/wmill_pg/pyproject.toml
+++ b/python-client/wmill_pg/pyproject.toml
@@ -1,6 +1,6 @@
 [tool.poetry]
 name = "wmill-pg"
-version = "1.605.0"
+version = "1.606.0"
 description = "An extension client for the wmill client library focused on pg"
 license = "Apache-2.0"
 homepage = "https://windmill.dev"
diff --git a/typescript-client/jsr.json b/typescript-client/jsr.json
index 7c0470a521..be40643880 100644
--- a/typescript-client/jsr.json
+++ b/typescript-client/jsr.json
@@ -1,6 +1,6 @@
 {
   "name": "@windmill/windmill",
-  "version": "1.605.0",
+  "version": "1.606.0",
   "exports": "./src/index.ts",
   "publish": {
     "exclude": ["!src", "./s3Types.ts", "./sqlUtils.ts", "./client.ts"]
diff --git a/typescript-client/package.json b/typescript-client/package.json
index 36f026e590..07f79c776b 100644
--- a/typescript-client/package.json
+++ b/typescript-client/package.json
@@ -1,7 +1,7 @@
 {
   "name": "windmill-client",
   "description": "Windmill SDK client for browsers and Node.js",
-  "version": "1.605.0",
+  "version": "1.606.0",
   "author": "Ruben Fiszel",
   "license": "Apache 2.0",
   "devDependencies": {
diff --git a/version.txt b/version.txt
index ebfc1d6910..f265131d26 100644
--- a/version.txt
+++ b/version.txt
@@ -1 +1 @@
-1.605.0
+1.606.0