dc-tec · Nov 7, 2026 · Nov 7, 2026
diff --git a/release-notes/0.6.1.md b/release-notes/0.6.1.md
@@ -4,9 +4,6 @@ OpenBao Operator 0.6.1 fixes Helm admission-policy serialization, small-cluster
 security issues in go-jose and golang.org/x/net. Restore targets accept stable OpenBao versions from 2.7.0 onward, and
 scheduled restore tests can inherit the version recorded with each backup.
 
-**Publication and final candidate qualification are pending.** These notes describe the prepared changes from
-0.6.0. Use the installation commands only after the release is published and its artifacts are verified.
-
 ## Security update
 
 The operator updates go-jose to 4.1.6 to address an RSA JSON Web Key denial-of-service issue. Install the matching
@@ -57,9 +54,10 @@ target. Both upstream releases contain security fixes. Review SSH identity-templ
 OpenBao server: wildcard substitutions are rejected by default. The operator release does not update
 `spec.version` or automatically upgrade the OpenBao server image.
 
-Focused qualification is recorded in the compatibility reference. Final 0.6.1 release-profile qualification and the
-operator upgrade rehearsal from published 0.6.0 to the final 0.6.1 candidate remain pending. These checks do not
-qualify every Kubernetes distribution, network topology, cloud identity, storage driver, or seal provider.
+The [0.6.1 release qualification checks](https://github.com/kubebao/openbao-operator/pull/936/checks) record the full
+release profile and the operator upgrade rehearsal from published 0.6.0 to the candidate. Earlier focused results
+retain the scope recorded in the compatibility reference. These checks do not qualify every Kubernetes
+distribution, network topology, cloud identity, storage driver, or seal provider.
 
 ## Upgrade from 0.6.0
 

diff --git a/website/content/docs/reference/compatibility.md b/website/content/docs/reference/compatibility.md
@@ -12,8 +12,9 @@ verifiedBy:
 ---
 
 The operator requires Kubernetes 1.33 or newer. The tables describe configured validation targets and focused checks.
-OpenBao Operator 0.6.1 release qualification is pending. The results below do not replace qualification of the final
-candidate or validate every cloud authentication method, distribution, seal, storage driver, or topology.
+The [0.6.1 release qualification checks](https://github.com/kubebao/openbao-operator/pull/936/checks) record the exact
+candidate and results. The focused results below retain their stated scope and do not validate every cloud
+authentication method, distribution, seal, storage driver, or topology.
 
 ## Kubernetes versions
 

diff --git a/website/content/releases/0.6.1.md b/website/content/releases/0.6.1.md
@@ -1,7 +1,7 @@
 ---
 title: OpenBao Operator 0.6.1
-description: Prepared maintenance release for Helm admission policies, small-cluster Autopilot, and restore versions.
-eyebrow: Release preparation · 0.6.1
+description: Maintenance release for Helm admission policies, small-cluster Autopilot, security fixes, and restore versions.
+eyebrow: Release · 0.6.1
 weight: 1
 verifiedBy:
   - release-notes/0.6.1.md
@@ -14,16 +14,10 @@ verifiedBy:
   - test/fixtures/operator-upgrade/versions.env
 ---
 
-OpenBao Operator 0.6.1 prepares fixes for Helm admission policies, small-cluster
-Raft Autopilot, and denial-of-service issues in go-jose and golang.org/x/net. Restore
-targets accept stable OpenBao versions from 2.7.0 onward, and scheduled tests can
-inherit each backup's recorded version.
-
-{{< callout type="note" title="Release preparation" >}}
-Publication and final candidate qualification are pending. OpenBao Operator
-0.6.0 remains the latest published release. The installation and artifact links
-below apply after 0.6.1 is published and verified.
-{{< /callout >}}
+OpenBao Operator 0.6.1 fixes Helm admission-policy serialization and small-cluster
+Raft Autopilot configuration. It also addresses denial-of-service issues in
+go-jose and golang.org/x/net. Restore targets accept stable OpenBao versions from
+2.7.0 onward, and scheduled tests can inherit each backup's recorded version.
 
 ## Review the fixes
 
@@ -78,9 +72,10 @@ and the chart at `oci://ghcr.io/kubebao/charts/openbao-operator`, version `0.6.1
 
 ## Preserve the qualification boundary
 
-Final release-profile qualification and the operator upgrade rehearsal from
-published 0.6.0 to the final 0.6.1 candidate remain pending. Earlier focused checks retain the scope
-recorded in [compatibility](../../docs/reference/compatibility/). Rehearse the
+The [0.6.1 release qualification checks](https://github.com/kubebao/openbao-operator/pull/936/checks)
+record the full release profile and the operator upgrade rehearsal from published
+0.6.0 to the candidate. Earlier focused checks retain the scope recorded in
+[compatibility](../../docs/reference/compatibility/). Rehearse the
 production combination in staging. Routine operator and OpenBao downgrades
 remain unsupported.
 

diff --git a/website/content/releases/_index.md b/website/content/releases/_index.md
@@ -11,19 +11,15 @@ The current manual stays focused on the current contract. Release pages preserve
 ## Latest published release
 
 <div class="link-grid">
-  <a href="0.6.0/"><strong>0.6.0</strong><p>Target-specific controller authentication, guarded restore recovery, and scheduled restore tests.</p></a>
+  <a href="0.6.1/"><strong>0.6.1</strong><p>Helm admission-policy, small-cluster Autopilot, security, and restore-version fixes.</p></a>
   <a href="https://github.com/kubebao/openbao-operator/releases"><strong>GitHub Releases</strong><p>Published assets, signatures, provenance, tags, and the full archive.</p></a>
 </div>
 
-## Release in preparation
-
-[OpenBao Operator 0.6.1](0.6.1/) prepares Helm admission-policy, small-cluster Autopilot, security, and restore-version
-updates. Publication and final candidate qualification are pending. The latest published release remains 0.6.0.
-
 ## Archive
 
 | Release | Published | Context |
 | --- | --- | --- |
+| [0.6.1](0.6.1/) | [GitHub Release](https://github.com/kubebao/openbao-operator/releases/tag/0.6.1) | Helm admission policies, small-cluster Autopilot, security, and restore versions |
 | [0.6.0](0.6.0/) | 2026-10-24 | Target JWT authentication, restore recovery, and networking changes |
 | [0.5.3](0.5.3/) | 2026-10-20 | Security update for compromised intermediate CA keys |
 | [0.5.2](0.5.2/) | 2026-10-14 | Backup scheduling and compatible fixes |

diff --git a/website/data/version_lines.yaml b/website/data/version_lines.yaml
@@ -1,14 +1,14 @@
 "0.6.x":
   label: "0.6.x"
   release: "0.6.1"
-  state: "Release preparation"
-  showNotice: true
+  state: "Current stable"
+  showNotice: false
   sourceRef: "0.6.1"
-  fallbackSourceRef: "ced35e7ea5e2a5ab0b95cd7adc25082a19d5146e"
+  fallbackSourceRef: "ddb4233e1439a90225fce90c8fff3907ee793d58"
   editRef: "main"
   contentRoot: "website/content"
   editable: true
-  notice: "Prepared 0.6.x documentation for OpenBao Operator 0.6.1. Publication and final candidate qualification are pending; 0.6.0 remains the latest published release."
+  notice: "Documentation for the 0.6 minor line through OpenBao Operator 0.6.1."
 "0.5.x":
   label: "0.5.x"
   release: "0.5.3"