diff --git a/Makefile b/Makefile
index 5cc8debe..a9cc9687 100644
--- a/Makefile
+++ b/Makefile
@@ -16,7 +16,7 @@
 # the License.
 
 # Update this on each new release, along with the NEWS.md file.
-VERSION := v0.3.5
+VERSION := v0.3.6
 
 NAME := fscrypt
 PAM_NAME := pam_$(NAME)
diff --git a/NEWS.md b/NEWS.md
index 73309279..45eeeca6 100644
--- a/NEWS.md
+++ b/NEWS.md
@@ -1,5 +1,17 @@
 # `fscrypt` release notes
 
+## Version 0.3.6
+
+* Upgraded various dependencies, including `golang.org/x/crypto` where the
+  upgrade resolves CVE-2024-45337 and CVE-2025-22869.  (These vulnerabilities
+  didn't actually affect `fscrypt`, as it doesn't use the relevant features.)
+
+* `fscrypt` now requires Go 1.23 or later to build.
+
+* Added fallback logic for when sysfs is not mounted.
+
+* Other minor fixes and documentation improvements.
+
 ## Version 0.3.5
 
 * Upgraded various dependencies, resolving two security alerts from GitHub.