diff --git a/clients/python/CHANGELOG.md b/clients/python/CHANGELOG.md
index 0879ccf..90ec10e 100644
--- a/clients/python/CHANGELOG.md
+++ b/clients/python/CHANGELOG.md
@@ -5,6 +5,17 @@ All notable changes to the SQL-FS Python SDK are documented here.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [0.3.1] - 2026-06-08
+
+### Added
+
+- `ingest_files(..., allow_oversized=False)` — rejects files larger than 8 MiB
+  with `ValidationError(code="EFILE_TOO_LARGE_FOR_CPYTHON")` before anything is
+  sent. The `python3` runtime (CPython WASM) reads sandbox files through an 8 MiB
+  IPC bridge, so `open()` fails on larger files. Pass `allow_oversized=True` to
+  ingest anyway (the bytes stay usable from bash and `js-exec`; only `python3
+  open()` can't read them), or split the file into <8 MiB chunks.
+
 ## [0.3.0] - 2026-06-05
 
 ### Added
diff --git a/clients/python/pyproject.toml b/clients/python/pyproject.toml
index 7569b6d..a8c0686 100644
--- a/clients/python/pyproject.toml
+++ b/clients/python/pyproject.toml
@@ -1,6 +1,6 @@
 [project]
 name = "sql-fs-sdk"
-version = "0.3.0"
+version = "0.3.1"
 description = "Python SDK for the SQL-FS API — persistent bash sandboxes for AI agents"
 readme = "README.md"
 requires-python = ">=3.9"
diff --git a/clients/python/src/sqlfs/_version.py b/clients/python/src/sqlfs/_version.py
index 493f741..260c070 100644
--- a/clients/python/src/sqlfs/_version.py
+++ b/clients/python/src/sqlfs/_version.py
@@ -1 +1 @@
-__version__ = "0.3.0"
+__version__ = "0.3.1"
diff --git a/clients/typescript/CHANGELOG.md b/clients/typescript/CHANGELOG.md
index 533c5ac..febd10d 100644
--- a/clients/typescript/CHANGELOG.md
+++ b/clients/typescript/CHANGELOG.md
@@ -2,6 +2,17 @@
 
 All notable changes to the TypeScript SDK are documented here.
 
+## [0.3.1] - 2026-06-08
+
+### Added
+
+- `ingestFiles(..., { allowOversized })` — rejects files larger than 8 MiB with
+  `ValidationError` (code `EFILE_TOO_LARGE_FOR_CPYTHON`) before anything is sent.
+  The `python3` runtime (CPython WASM) reads sandbox files through an 8 MiB IPC
+  bridge, so `open()` fails on larger files. Pass `allowOversized: true` to
+  ingest anyway (the bytes stay usable from bash and `js-exec`; only `python3
+  open()` can't read them), or split the file into <8 MiB chunks.
+
 ## [0.3.0] - 2026-06-05
 
 ### Added
diff --git a/clients/typescript/package.json b/clients/typescript/package.json
index a3afc92..530468d 100644
--- a/clients/typescript/package.json
+++ b/clients/typescript/package.json
@@ -1,6 +1,6 @@
 {
 	"name": "sql-fs-sdk",
-	"version": "0.3.0",
+	"version": "0.3.1",
 	"description": "TypeScript SDK for the SQL-FS API - persistent bash sandboxes for AI agents",
 	"type": "module",
 	"license": "MIT",
diff --git a/clients/typescript/src/version.ts b/clients/typescript/src/version.ts
index 09f8c8c..50dde9e 100644
--- a/clients/typescript/src/version.ts
+++ b/clients/typescript/src/version.ts
@@ -1 +1 @@
-export const version = "0.3.0";
+export const version = "0.3.1";