diff --git a/.release-please-manifest.json b/.release-please-manifest.json
index bad731a67..de5b7a69f 100644
--- a/.release-please-manifest.json
+++ b/.release-please-manifest.json
@@ -1,3 +1,3 @@
 {
-  ".": "0.62.4"
+  ".": "0.62.5"
 }
diff --git a/CHANGELOG.md b/CHANGELOG.md
index fbe27cb90..9534bfe63 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -2,6 +2,18 @@
 
 All notable changes to this project will be documented in this file.
 
+## [0.62.5](https://github.com/dan-petty/devops-cli/compare/v0.62.4...v0.62.5) (2026-11-05)
+
+
+### Bug Fixes
+
+* **security:** keep prose after a token colon unmasked ([#3639](https://github.com/dan-petty/devops-cli/issues/3639)) ([73eff22](https://github.com/dan-petty/devops-cli/commit/73eff225de621a2c0db01e69d0cb77e5e26a72d5))
+
+
+### Performance Improvements
+
+* **roadmap:** read the default tree once per run ([#3636](https://github.com/dan-petty/devops-cli/issues/3636)) ([2db71f2](https://github.com/dan-petty/devops-cli/commit/2db71f29225e9378c0be310b98d7885d3100125c))
+
 ## [0.62.4](https://github.com/dan-petty/devops-cli/compare/v0.62.3...v0.62.4) (2026-11-05)
 
 
diff --git a/pyproject.toml b/pyproject.toml
index 108770677..b7c8b20a9 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "devops-cli"
-version = "0.62.4"
+version = "0.62.5"
 
 description = "DevOps CLI for managing repos, SSH keys, Kubernetes, and more"
 requires-python = ">=3.14"
diff --git a/uv.lock b/uv.lock
index de6a4c426..779080643 100644
--- a/uv.lock
+++ b/uv.lock
@@ -775,7 +775,7 @@ wheels = [
 
 [[package]]
 name = "devops-cli"
-version = "0.62.4"
+version = "0.62.5"
 source = { editable = "." }
 dependencies = [
     { name = "anthropic" },