diff --git a/CHANGELOG.md b/CHANGELOG.md
index c6706ac..83d9529 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,5 +1,14 @@
 # Changelog
 
+## [1.7.0] — 2026-08-14
+
+Minor — coordinated framework release (lockstep versioning). No changes to this module's own API.
+
+### Changed
+
+- Bumped einherjar dependencies to v1.7.0. The behavioural changes in this release are in `spa-server`
+  (per-file Cache-Control, a navigation-scoped SPA fallback, nosniff, and a non-root image).
+
 ## [1.6.0] — 2026-08-13
 
 Minor — coordinated framework release (lockstep versioning). No changes to this module's own API.
diff --git a/README.md b/README.md
index ee8d20d..59c9aa0 100644
--- a/README.md
+++ b/README.md
@@ -1,6 +1,6 @@
 # einherjar/auth-jwt
 
-[![version](https://img.shields.io/badge/version-v1.6.0-5C4EE5?style=flat-square)](https://code.nochebuena.dev/einherjar/auth-jwt)
+[![version](https://img.shields.io/badge/version-v1.7.0-5C4EE5?style=flat-square)](https://code.nochebuena.dev/einherjar/auth-jwt)
 [![license](https://img.shields.io/badge/license-AGPL--3.0-22863A?style=flat-square)](LICENSE)
 [![go](https://img.shields.io/badge/Go-1.26+-00ADD8?style=flat-square&logo=go&logoColor=white)](https://go.dev)
 
diff --git a/go.mod b/go.mod
index 6e4fa4a..7ea2902 100644
--- a/go.mod
+++ b/go.mod
@@ -3,14 +3,14 @@ module code.nochebuena.dev/einherjar/auth-jwt
 go 1.26
 
 require (
-	code.nochebuena.dev/einherjar/auth v1.6.0
-	code.nochebuena.dev/einherjar/contracts v1.6.0
-	code.nochebuena.dev/einherjar/core v1.6.0
+	code.nochebuena.dev/einherjar/auth v1.7.0
+	code.nochebuena.dev/einherjar/contracts v1.7.0
+	code.nochebuena.dev/einherjar/core v1.7.0
 	github.com/golang-jwt/jwt/v5 v5.3.1
 )
 
 require (
-	code.nochebuena.dev/einherjar/web v1.6.0 // indirect
+	code.nochebuena.dev/einherjar/web v1.7.0 // indirect
 	github.com/gabriel-vasile/mimetype v1.4.15 // indirect
 	github.com/go-chi/chi/v5 v5.3.1 // indirect
 	github.com/go-playground/locales v0.14.1 // indirect
diff --git a/go.sum b/go.sum
index 1afbd64..04de4b6 100644
--- a/go.sum
+++ b/go.sum
@@ -1,11 +1,11 @@
-code.nochebuena.dev/einherjar/auth v1.6.0 h1:x107dO2vkLibsAFzdwl6BSSr2nbpWn0gxrU4A11lzXs=
-code.nochebuena.dev/einherjar/auth v1.6.0/go.mod h1:JbwxC9jiUis6lm5Z3HM1N/dhVudLlczSoAM8R+Kmfw0=
-code.nochebuena.dev/einherjar/contracts v1.6.0 h1:Y+8B+m4kQR5l/6lMY7SYdvIbwhFOnliCXDv9oBCOUP4=
-code.nochebuena.dev/einherjar/contracts v1.6.0/go.mod h1:ccltUtrFb5+MEJdkx2VVEUL+xC5pupVlVVsMM8AlCWI=
-code.nochebuena.dev/einherjar/core v1.6.0 h1:6cQIYZliw0hcuk7Cy44swleLC1Ch8WFxTkkHsGxkAFk=
-code.nochebuena.dev/einherjar/core v1.6.0/go.mod h1:azRKvJBtMWGp8jhveG1fZc9jlPTwXu8clvBdXIjTB9k=
-code.nochebuena.dev/einherjar/web v1.6.0 h1:Z6PHRGF9u0dZAEp6gX9d3q7n9SEhkWJ8c1G6euAGqDg=
-code.nochebuena.dev/einherjar/web v1.6.0/go.mod h1:FiRWfRCzSmNjXKYvFyF/qOVNvt14AigBxZtV73+oxrI=
+code.nochebuena.dev/einherjar/auth v1.7.0 h1:XaJoLLShlT22Onrsl1WH6AJfJINENDRu1K0gXLF0HG8=
+code.nochebuena.dev/einherjar/auth v1.7.0/go.mod h1:wPVhySETRF+pWLwgvxe/e5YvRELiCm8BEE94RtL32Fc=
+code.nochebuena.dev/einherjar/contracts v1.7.0 h1:yhbtmvE8u6KXcuG95p888+4tDIiTXDf5z/siKrjGbrc=
+code.nochebuena.dev/einherjar/contracts v1.7.0/go.mod h1:ccltUtrFb5+MEJdkx2VVEUL+xC5pupVlVVsMM8AlCWI=
+code.nochebuena.dev/einherjar/core v1.7.0 h1:gdjNEgO8E/ALppyBldj27iKQQlWbL/OWV6asdxWLXqU=
+code.nochebuena.dev/einherjar/core v1.7.0/go.mod h1:IvSCG7XL4gNyoylwlClKj3jepWBLAKb2QKAgumTRkug=
+code.nochebuena.dev/einherjar/web v1.7.0 h1:oYhU6st1uySbJI58RLrPflwwSZbUdIRd1Z0YM1L1rkk=
+code.nochebuena.dev/einherjar/web v1.7.0/go.mod h1:3eVd92LyLxViCHZB64zHzN5WSiNIk5i4IIMZTodUPNI=
 github.com/davecgh/go-spew v1.1.1 h1:vj9j/u1bqnvCEfJOwUhtlOARqs3+rkHYY13jYWTU97c=
 github.com/davecgh/go-spew v1.1.1/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=
 github.com/gabriel-vasile/mimetype v1.4.15 h1:05iP/CYtZ/w455R/KZM6rZ5ieAdh99UPtd+d3YzLmaI=