diff --git a/.github/release-please/release-please-manifest.json b/.github/release-please/release-please-manifest.json
index aa3e449461..f87fa872f8 100644
--- a/.github/release-please/release-please-manifest.json
+++ b/.github/release-please/release-please-manifest.json
@@ -3,7 +3,7 @@
   "lib/ocrypto": "0.14.0",
   "lib/flattening": "0.2.0",
   "lib/identifier": "0.4.0",
-  "otdfctl": "0.38.0",
+  "otdfctl": "0.39.0",
   "protocol/go": "0.41.0",
   "sdk": "0.34.0",
   "service": "0.27.0"
diff --git a/otdfctl/CHANGELOG.md b/otdfctl/CHANGELOG.md
index 05e3a2bff7..7343806699 100644
--- a/otdfctl/CHANGELOG.md
+++ b/otdfctl/CHANGELOG.md
@@ -1,5 +1,14 @@
 # Changelog
 
+## [0.39.0](https://github.com/opentdf/platform/compare/otdfctl/v0.38.0...otdfctl/v0.39.0) (2026-10-02)
+
+
+### Bug Fixes
+
+* **cli:** drop the encrypt-side stdin spool ([#3948](https://github.com/opentdf/platform/issues/3948)) ([5603c2e](https://github.com/opentdf/platform/commit/5603c2eca9a445eb58b974df393b64adb4d36635))
+* **cli:** validate endpoint before profile creation ([#4130](https://github.com/opentdf/platform/issues/4130)) ([a2f1327](https://github.com/opentdf/platform/commit/a2f1327aa6358b55c65d3a50bd73ab0ec28b6014))
+* **deps:** bump SDK from v0.32.0 to v0.33.0 in /otdfctl ([#4110](https://github.com/opentdf/platform/issues/4110)) ([87dcf1c](https://github.com/opentdf/platform/commit/87dcf1c848ec392a39509609b04f321888fb0609))
+
 ## [0.38.0](https://github.com/opentdf/platform/compare/otdfctl/v0.37.0...otdfctl/v0.38.0) (2026-09-22)
 
 
diff --git a/otdfctl/pkg/config/config.go b/otdfctl/pkg/config/config.go
index d3f982dd90..e78f06b7a1 100644
--- a/otdfctl/pkg/config/config.go
+++ b/otdfctl/pkg/config/config.go
@@ -8,7 +8,7 @@ var (
 	// config file naming and in the profile store
 	AppName = "otdfctl"
 
-	Version   = "0.38.0" // x-release-please-version
+	Version   = "0.39.0" // x-release-please-version
 	BuildTime = "1970-01-01T00:00:00Z"
 	CommitSha = "0000000"