diff --git a/.release-please-manifest.json b/.release-please-manifest.json
index d52d2b9..a26ebfc 100644
--- a/.release-please-manifest.json
+++ b/.release-please-manifest.json
@@ -1,3 +1,3 @@
 {
-  ".": "0.13.0"
+  ".": "0.14.0"
 }
\ No newline at end of file
diff --git a/CHANGELOG.md b/CHANGELOG.md
index e741eb1..b79fa30 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,5 +1,27 @@
 # Changelog
 
+## [0.14.0](https://github.com/warpdotdev/oz-sdk-python/compare/v0.13.0...v0.14.0) (2026-07-07)
+
+
+### Features
+
+* **deps:** seal idna>=3.15 + aiohttp>=3.13.5 CVE floors as custom code ([27e79ac](https://github.com/warpdotdev/oz-sdk-python/commit/27e79ac7caea54928333f9a44367c7830ee4c13a))
+
+
+### Bug Fixes
+
+* **deps:** pin aiohttp>=3.14.1, pytest>=9.0.3, pygments>=2.20.0 (CVE fixes) ([9bcd811](https://github.com/warpdotdev/oz-sdk-python/commit/9bcd811980eb957f94ce639c43d673b7413999cd))
+* **deps:** seal aiohttp>=3.14.1, pytest>=9.0.3, pygments>=2.20.0 CVE fixes ([5ad6a6e](https://github.com/warpdotdev/oz-sdk-python/commit/5ad6a6e49f2eb5769f839db25267eb605d81c674))
+* **lint:** suppress pyright errors for optional httpx_aiohttp import on Python 3.9 ([779259f](https://github.com/warpdotdev/oz-sdk-python/commit/779259fa90af41a7666ebdf14f4026453a648f1f))
+* **stlc:** seal handlebars>=4.7.9 pin for CVE-2026-33937 and related (oz-sdk-typescript) ([46c1428](https://github.com/warpdotdev/oz-sdk-python/commit/46c142840b2637e734bdf272d66742a563282807))
+* update aiohttp to resolve CVE-2026-22815 ([#25](https://github.com/warpdotdev/oz-sdk-python/issues/25)) ([03d6bc4](https://github.com/warpdotdev/oz-sdk-python/commit/03d6bc4d2253f820aa5b1fa842d382b20f2d681d))
+
+
+### Chores
+
+* reseal python stlc tracking file to current staging main ([ed25fd4](https://github.com/warpdotdev/oz-sdk-python/commit/ed25fd46853fe06a7b8ae1e89bb96cef77ea61b6))
+* restore promote workflow and changelog as sealed custom code ([7ac7b1f](https://github.com/warpdotdev/oz-sdk-python/commit/7ac7b1fa205754be70a409721d30a2f8b9a4d175))
+
 ## 0.13.0 (2026-05-21)
 
 Full Changelog: [v0.12.0...v0.13.0](https://github.com/warpdotdev/oz-sdk-python/compare/v0.12.0...v0.13.0)
diff --git a/pyproject.toml b/pyproject.toml
index d6d05c3..4d9d83b 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -1,6 +1,6 @@
 [project]
 name = "oz-agent-sdk"
-version = "0.13.0"
+version = "0.14.0"
 description = "The official Python library for the oz-api API"
 dynamic = ["readme"]
 license = "Apache-2.0"
diff --git a/src/oz_agent_sdk/_version.py b/src/oz_agent_sdk/_version.py
index 1762ab1..0909eaa 100644
--- a/src/oz_agent_sdk/_version.py
+++ b/src/oz_agent_sdk/_version.py
@@ -1,4 +1,4 @@
 # File generated from our OpenAPI spec by Stainless. See CONTRIBUTING.md for details.
 
 __title__ = "oz_agent_sdk"
-__version__ = "0.13.0"  # x-release-please-version
+__version__ = "0.14.0"  # x-release-please-version