diff --git a/CHANGELOG.md b/CHANGELOG.md
index f73314eb..2f8beb84 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -6,6 +6,13 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 
 ## [Unreleased]
 
+## [16.0.6]
+
+### Fixed
+
+- Replace vulnerable dependency `request` with patched `@cypress/request` ([#441](https://github.com/MetaMask/web3-provider-engine/pull/441))
+- Update `ws` from `^5.1.1` to `^7.5.9` ([#446](https://github.com/MetaMask/web3-provider-engine/pull/446))
+
 ## [16.0.5]
 
 ### Changed
diff --git a/package.json b/package.json
index ea6b19c7..dcdba211 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "web3-provider-engine",
-  "version": "16.0.5",
+  "version": "16.0.6",
   "description": "A JavaScript library for composing Ethereum provider objects using middleware modules",
   "repository": "https://github.com/MetaMask/web3-provider-engine",
   "main": "index.js",