diff --git a/CHANGELOG.md b/CHANGELOG.md
index 0636f7a..fb51bf7 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -6,6 +6,15 @@ This module adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html
 
 ---
 
+## [1.7.0] — 2026-08-14
+
+Minor — coordinated framework release (lockstep versioning). No changes to this module's own API.
+
+### Changed
+
+- Bumped einherjar dependencies to v1.7.0. The behavioural changes in this release are in `spa-server`
+  (per-file Cache-Control, a navigation-scoped SPA fallback, nosniff, and a non-root image).
+
 ## [1.6.0] — 2026-08-13
 
 Minor — coordinated framework release (lockstep versioning). No changes to this module's own API.
diff --git a/README.md b/README.md
index 4c6106b..9b1a5fb 100644
--- a/README.md
+++ b/README.md
@@ -1,6 +1,6 @@
 # einherjar/smtp
 
-[![version](https://img.shields.io/badge/version-v1.6.0-5C4EE5?style=flat-square)](https://code.nochebuena.dev/einherjar/smtp)
+[![version](https://img.shields.io/badge/version-v1.7.0-5C4EE5?style=flat-square)](https://code.nochebuena.dev/einherjar/smtp)
 [![license](https://img.shields.io/badge/license-AGPL--3.0-22863A?style=flat-square)](LICENSE)
 [![go](https://img.shields.io/badge/Go-1.26+-00ADD8?style=flat-square&logo=go&logoColor=white)](https://go.dev)
 [![health](https://img.shields.io/badge/health-degraded-E36209?style=flat-square)]()
diff --git a/go.mod b/go.mod
index 7ad1d92..9943367 100644
--- a/go.mod
+++ b/go.mod
@@ -3,6 +3,6 @@ module code.nochebuena.dev/einherjar/smtp
 go 1.26
 
 require (
-	code.nochebuena.dev/einherjar/contracts v1.6.0
-	code.nochebuena.dev/einherjar/core v1.6.0
+	code.nochebuena.dev/einherjar/contracts v1.7.0
+	code.nochebuena.dev/einherjar/core v1.7.0
 )
diff --git a/go.sum b/go.sum
index 3ced3d8..536b4d6 100644
--- a/go.sum
+++ b/go.sum
@@ -1,4 +1,4 @@
-code.nochebuena.dev/einherjar/contracts v1.6.0 h1:Y+8B+m4kQR5l/6lMY7SYdvIbwhFOnliCXDv9oBCOUP4=
-code.nochebuena.dev/einherjar/contracts v1.6.0/go.mod h1:ccltUtrFb5+MEJdkx2VVEUL+xC5pupVlVVsMM8AlCWI=
-code.nochebuena.dev/einherjar/core v1.6.0 h1:6cQIYZliw0hcuk7Cy44swleLC1Ch8WFxTkkHsGxkAFk=
-code.nochebuena.dev/einherjar/core v1.6.0/go.mod h1:azRKvJBtMWGp8jhveG1fZc9jlPTwXu8clvBdXIjTB9k=
+code.nochebuena.dev/einherjar/contracts v1.7.0 h1:yhbtmvE8u6KXcuG95p888+4tDIiTXDf5z/siKrjGbrc=
+code.nochebuena.dev/einherjar/contracts v1.7.0/go.mod h1:ccltUtrFb5+MEJdkx2VVEUL+xC5pupVlVVsMM8AlCWI=
+code.nochebuena.dev/einherjar/core v1.7.0 h1:gdjNEgO8E/ALppyBldj27iKQQlWbL/OWV6asdxWLXqU=
+code.nochebuena.dev/einherjar/core v1.7.0/go.mod h1:IvSCG7XL4gNyoylwlClKj3jepWBLAKb2QKAgumTRkug=