chore(release): 0.13.0 version and changelog

CHANGELOG.md

@@ -10,6 +10,8 @@ starts with **Upgrade notes**: read them before you upgrade. The upgrade procedu
 
 ## [Unreleased]
 
+## [0.13.0] - 2026-11-11
+
 ### Upgrade notes
 
 - **The upgrade drains every host.** The new host agent cannot adopt a VM from an earlier
@@ -297,7 +299,8 @@ starts with **Upgrade notes**: read them before you upgrade. The upgrade procedu
 The first tagged release. See the
 [release notes](https://github.com/cortexapps/engrams/releases/tag/v0.10.0).
 
-[Unreleased]: https://github.com/cortexapps/engrams/compare/v0.12.0...HEAD
+[Unreleased]: https://github.com/cortexapps/engrams/compare/v0.13.0...HEAD
+[0.13.0]: https://github.com/cortexapps/engrams/compare/v0.12.0...v0.13.0
 [0.12.0]: https://github.com/cortexapps/engrams/compare/v0.11.0...v0.12.0
 [0.11.0]: https://github.com/cortexapps/engrams/compare/v0.10.0...v0.11.0
 [0.10.0]: https://github.com/cortexapps/engrams/releases/tag/v0.10.0

crates/engram-cli/src/main.rs

@@ -18,7 +18,7 @@ use engram_app_client::{Auth, Clients, Transport};
 use output::{fail, CliError, CliResult};
 
 /// The release version. `scripts/release-version.sh` rewrites this line.
-const VERSION: &str = "0.12.0";
+const VERSION: &str = "0.13.0";
 
 /// The version the binary reports. A nightly build (nightly.yml) sets
 /// `ENGRAMS_BUILD_VERSION` to its prerelease version, for example

deploy/helm/engram-host-fleet/Chart.yaml

@@ -13,8 +13,8 @@ description: |
   means a metal SKU or explicit nested-virt (Intel-only today — see
   ADR 0044).
 type: application
-version: 0.12.0
-appVersion: "0.12.0"
+version: 0.13.0
+appVersion: "0.13.0"
 keywords:
   - engram
   - firecracker

deploy/helm/engram/Chart.yaml

@@ -8,8 +8,8 @@ description: |
   bindings (Workload Identity, secret providers, LB annotations) live
   in `values-*.yaml.example` overlays.
 type: application
-version: 0.12.0
-appVersion: "0.12.0"
+version: 0.13.0
+appVersion: "0.13.0"
 keywords:
   - engram
   - firecracker