diff --git a/.github/release-please/release-please-manifest.json b/.github/release-please/release-please-manifest.json
index e75629345..0c2ecec68 100644
--- a/.github/release-please/release-please-manifest.json
+++ b/.github/release-please/release-please-manifest.json
@@ -1,3 +1,3 @@
 {
-  ".": "0.19.0"
+  ".": "0.20.0"
 }
\ No newline at end of file
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 050d17e43..7467d1573 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,5 +1,17 @@
 # Changelog
 
+## [0.20.0](https://github.com/opentdf/web-sdk/compare/sdk-v0.19.0...sdk-v0.20.0) (2026-07-08)
+
+
+### Bug Fixes
+
+* **ci:** allow Go toolchain auto-download in platform-roundtrip ([#966](https://github.com/opentdf/web-sdk/issues/966)) ([1606967](https://github.com/opentdf/web-sdk/commit/1606967566ef3b1459914a1b3ec2239a8582d0a1))
+* **deps:** resolve Dependabot alerts and clear npm audit ([#965](https://github.com/opentdf/web-sdk/issues/965)) ([328c63c](https://github.com/opentdf/web-sdk/commit/328c63ce5e193d0ce6241276481aa29003f8273d))
+* **sdk:** bump uuid and nyc in /lib ([#955](https://github.com/opentdf/web-sdk/issues/955)) ([e0201cd](https://github.com/opentdf/web-sdk/commit/e0201cd19e41267d3880ba287c0340284a0d7e57))
+* **sdk:** bump uuid from 14.0.0 to 14.0.1 in /lib ([#953](https://github.com/opentdf/web-sdk/issues/953)) ([acf26fd](https://github.com/opentdf/web-sdk/commit/acf26fd2f0b70b5f4959752d29309f04f9b9ffba))
+* **sdk:** Drops user_info check, does local `exp` check ([#956](https://github.com/opentdf/web-sdk/issues/956)) ([d1c88fd](https://github.com/opentdf/web-sdk/commit/d1c88fd8e54e680f8a12a7e177475678ed05bbd9))
+* **tdf3:** remove TODO from customer-facing error message ([#952](https://github.com/opentdf/web-sdk/issues/952)) ([19f8d53](https://github.com/opentdf/web-sdk/commit/19f8d53d9c3acec8beaf1a5a3022a3fafaac20f5))
+
 ## [0.19.0](https://github.com/opentdf/web-sdk/compare/sdk-v0.18.0...sdk-v0.19.0) (2026-06-23)
 
 
diff --git a/Makefile b/Makefile
index 37a0e85d2..ddc5547c1 100644
--- a/Makefile
+++ b/Makefile
@@ -1,6 +1,6 @@
 
 # x-release-please-start-version
-version=0.19.0
+version=0.20.0
 # x-release-please-end
 extras=cli web-app
 pkgs=lib $(extras)
diff --git a/cli/package-lock.json b/cli/package-lock.json
index 1e86c91bb..6f36035fe 100644
--- a/cli/package-lock.json
+++ b/cli/package-lock.json
@@ -1,15 +1,15 @@
 {
   "name": "@opentdf/ctl",
-  "version": "0.19.0",
+  "version": "0.20.0",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@opentdf/ctl",
-      "version": "0.19.0",
+      "version": "0.20.0",
       "license": "BSD-3-Clause-Clear",
       "dependencies": {
-        "@opentdf/sdk": "file:../lib/opentdf-sdk-0.19.0.tgz",
+        "@opentdf/sdk": "file:../lib/opentdf-sdk-0.20.0.tgz",
         "yargs": "^18.0.0"
       },
       "bin": {
@@ -407,9 +407,9 @@
       }
     },
     "node_modules/@opentdf/sdk": {
-      "version": "0.19.0",
-      "resolved": "file:../lib/opentdf-sdk-0.19.0.tgz",
-      "integrity": "sha512-poWxIWnA40ujz1iR8xqjkL5vXr6Zk1Ts57S4OO7fCDx6D25QuWwWYV90j7SfszU1oIF/IiQwp/WoPRZv7xGWnQ==",
+      "version": "0.20.0",
+      "resolved": "file:../lib/opentdf-sdk-0.20.0.tgz",
+      "integrity": "sha512-9htqIO+bVhZF+mKJcoEf0LxOmIvYkjXu/giiuYMIvY2oLX+op7OG6qXTIup8/TpGMSb3iKIMosz7kNJ+8XSbSA==",
       "license": "BSD-3-Clause-Clear",
       "dependencies": {
         "@connectrpc/connect": "^2.0.2",
diff --git a/cli/package.json b/cli/package.json
index 33bfb0000..c7af75834 100644
--- a/cli/package.json
+++ b/cli/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@opentdf/ctl",
-  "version": "0.19.0",
+  "version": "0.20.0",
   "description": "Node based CLI for opentdf",
   "repository": {
     "type": "git",
@@ -55,7 +55,7 @@
     "diff": "^8.0.3"
   },
   "dependencies": {
-    "@opentdf/sdk": "file:../lib/opentdf-sdk-0.19.0.tgz",
+    "@opentdf/sdk": "file:../lib/opentdf-sdk-0.20.0.tgz",
     "yargs": "^18.0.0"
   }
 }
diff --git a/lib/package-lock.json b/lib/package-lock.json
index de1c2e6a9..2e993e75f 100644
--- a/lib/package-lock.json
+++ b/lib/package-lock.json
@@ -1,12 +1,12 @@
 {
   "name": "@opentdf/sdk",
-  "version": "0.19.0",
+  "version": "0.20.0",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@opentdf/sdk",
-      "version": "0.19.0",
+      "version": "0.20.0",
       "license": "BSD-3-Clause-Clear",
       "dependencies": {
         "@connectrpc/connect": "^2.0.2",
diff --git a/lib/package.json b/lib/package.json
index 9d75ff704..9a5a18b36 100644
--- a/lib/package.json
+++ b/lib/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@opentdf/sdk",
-  "version": "0.19.0",
+  "version": "0.20.0",
   "description": "OpenTDF for the Web",
   "homepage": "https://github.com/opentdf/web-sdk",
   "bugs": {
diff --git a/lib/src/version.ts b/lib/src/version.ts
index f1fe66c43..e56ae7aa2 100644
--- a/lib/src/version.ts
+++ b/lib/src/version.ts
@@ -1,7 +1,7 @@
 /**
  * Exposes the released version number of the `@opentdf/sdk` package
  */
-export const version = '0.19.0'; // x-release-please-version
+export const version = '0.20.0'; // x-release-please-version
 
 /**
  * A string name used to label requests as coming from this library client.
diff --git a/version.txt b/version.txt
index 1cf0537c3..5a03fb737 100644
--- a/version.txt
+++ b/version.txt
@@ -1 +1 @@
-0.19.0
+0.20.0
diff --git a/web-app/package-lock.json b/web-app/package-lock.json
index e39c7ce53..bbee888fd 100644
--- a/web-app/package-lock.json
+++ b/web-app/package-lock.json
@@ -1,15 +1,15 @@
 {
   "name": "web-app",
-  "version": "0.19.0",
+  "version": "0.20.0",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "web-app",
-      "version": "0.19.0",
+      "version": "0.20.0",
       "license": "BSD-3-Clause-Clear",
       "dependencies": {
-        "@opentdf/sdk": "file:../lib/opentdf-sdk-0.19.0.tgz",
+        "@opentdf/sdk": "file:../lib/opentdf-sdk-0.20.0.tgz",
         "clsx": "^2.1.1",
         "dpop": "^1.4.1",
         "native-file-system-adapter": "^3.0.1",
@@ -769,9 +769,9 @@
       }
     },
     "node_modules/@opentdf/sdk": {
-      "version": "0.19.0",
-      "resolved": "file:../lib/opentdf-sdk-0.19.0.tgz",
-      "integrity": "sha512-poWxIWnA40ujz1iR8xqjkL5vXr6Zk1Ts57S4OO7fCDx6D25QuWwWYV90j7SfszU1oIF/IiQwp/WoPRZv7xGWnQ==",
+      "version": "0.20.0",
+      "resolved": "file:../lib/opentdf-sdk-0.20.0.tgz",
+      "integrity": "sha512-9htqIO+bVhZF+mKJcoEf0LxOmIvYkjXu/giiuYMIvY2oLX+op7OG6qXTIup8/TpGMSb3iKIMosz7kNJ+8XSbSA==",
       "license": "BSD-3-Clause-Clear",
       "dependencies": {
         "@connectrpc/connect": "^2.0.2",
@@ -932,9 +932,6 @@
         "arm64"
       ],
       "dev": true,
-      "libc": [
-        "glibc"
-      ],
       "license": "MIT",
       "optional": true,
       "os": [
@@ -952,9 +949,6 @@
         "arm64"
       ],
       "dev": true,
-      "libc": [
-        "musl"
-      ],
       "license": "MIT",
       "optional": true,
       "os": [
@@ -972,9 +966,6 @@
         "ppc64"
       ],
       "dev": true,
-      "libc": [
-        "glibc"
-      ],
       "license": "MIT",
       "optional": true,
       "os": [
@@ -992,9 +983,6 @@
         "s390x"
       ],
       "dev": true,
-      "libc": [
-        "glibc"
-      ],
       "license": "MIT",
       "optional": true,
       "os": [
@@ -1012,9 +1000,6 @@
         "x64"
       ],
       "dev": true,
-      "libc": [
-        "glibc"
-      ],
       "license": "MIT",
       "optional": true,
       "os": [
@@ -1032,9 +1017,6 @@
         "x64"
       ],
       "dev": true,
-      "libc": [
-        "musl"
-      ],
       "license": "MIT",
       "optional": true,
       "os": [
@@ -3212,9 +3194,6 @@
         "arm64"
       ],
       "dev": true,
-      "libc": [
-        "glibc"
-      ],
       "license": "MPL-2.0",
       "optional": true,
       "os": [
@@ -3236,9 +3215,6 @@
         "arm64"
       ],
       "dev": true,
-      "libc": [
-        "musl"
-      ],
       "license": "MPL-2.0",
       "optional": true,
       "os": [
@@ -3260,9 +3236,6 @@
         "x64"
       ],
       "dev": true,
-      "libc": [
-        "glibc"
-      ],
       "license": "MPL-2.0",
       "optional": true,
       "os": [
@@ -3284,9 +3257,6 @@
         "x64"
       ],
       "dev": true,
-      "libc": [
-        "musl"
-      ],
       "license": "MPL-2.0",
       "optional": true,
       "os": [
diff --git a/web-app/package.json b/web-app/package.json
index 0f1ec63dc..7b3093862 100644
--- a/web-app/package.json
+++ b/web-app/package.json
@@ -1,6 +1,6 @@
 {
   "name": "web-app",
-  "version": "0.19.0",
+  "version": "0.20.0",
   "license": "BSD-3-Clause-Clear",
   "type": "module",
   "scripts": {
@@ -14,10 +14,10 @@
     "preview": "vite preview",
     "test": "vite build && vitest",
     "test:ui": "vite build && vitest --ui",
-    "rebuild": "npm remove @opentdf/sdk && npm add file:../lib/opentdf-sdk-0.19.0.tgz && npm run dev"
+    "rebuild": "npm remove @opentdf/sdk && npm add file:../lib/opentdf-sdk-0.20.0.tgz && npm run dev"
   },
   "dependencies": {
-    "@opentdf/sdk": "file:../lib/opentdf-sdk-0.19.0.tgz",
+    "@opentdf/sdk": "file:../lib/opentdf-sdk-0.20.0.tgz",
     "clsx": "^2.1.1",
     "dpop": "^1.4.1",
     "native-file-system-adapter": "^3.0.1",