diff --git a/.changeset/live-smoke-waf-403.md b/.changeset/live-smoke-waf-403.md
deleted file mode 100644
index 87151c7..0000000
--- a/.changeset/live-smoke-waf-403.md
+++ /dev/null
@@ -1,17 +0,0 @@
----
-"@refkit/provider-testkit": patch
-"@refkit/provider-gutendex": patch
----
-
-Stop the weekly live-smoke from crying wolf on WAF blocks: `liveSmoke` gains an
-opt-in `tolerateUpstreamBlock` that skips (with a warning) when the source's WAF
-returns HTTP 403 from the runner's datacenter IP — 404s, 5xx, schema changes,
-and empty results still fail. Applied to gutendex only, whose Cloudflare front
-blocks GitHub Actions IPs regardless of User-Agent (verified with both a
-descriptive bot UA and a browser UA). gutendex requests also send an explicit
-`Accept: application/json` now.
-
-gutendex additionally gains a `baseUrl` config: the upstream docs frame
-gutendex.com as a test instance ("You should run your own server, but you can
-test queries at gutendex.com"), so production/datacenter consumers can now
-point the provider at a self-hosted Gutendex.
diff --git a/packages/mcp/CHANGELOG.md b/packages/mcp/CHANGELOG.md
index bf87f13..4130e13 100644
--- a/packages/mcp/CHANGELOG.md
+++ b/packages/mcp/CHANGELOG.md
@@ -1,5 +1,20 @@
 # @refkit/mcp
 
+## 0.6.1
+
+### Patch Changes
+
+- Updated dependencies [d6432a1]
+  - @refkit/provider-gutendex@0.2.5
+  - @refkit/provider-artic@0.2.4
+  - @refkit/provider-internet-archive@0.3.2
+  - @refkit/provider-met@0.2.4
+  - @refkit/provider-openverse@0.3.2
+  - @refkit/provider-poetrydb@0.2.4
+  - @refkit/provider-polyhaven@0.2.3
+  - @refkit/provider-rijksmuseum@0.2.3
+  - @refkit/provider-wikimedia-commons@0.3.2
+
 ## 0.6.0
 
 ### Minor Changes
diff --git a/packages/mcp/package.json b/packages/mcp/package.json
index 236ce6f..ec3490c 100644
--- a/packages/mcp/package.json
+++ b/packages/mcp/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@refkit/mcp",
-  "version": "0.6.0",
+  "version": "0.6.1",
   "description": "MCP server for refkit — exposes license-normalized reference search as an agent tool.",
   "type": "module",
   "license": "Apache-2.0",
diff --git a/packages/provider-gutendex/CHANGELOG.md b/packages/provider-gutendex/CHANGELOG.md
index d8dadc8..c5f1556 100644
--- a/packages/provider-gutendex/CHANGELOG.md
+++ b/packages/provider-gutendex/CHANGELOG.md
@@ -1,5 +1,22 @@
 # @refkit/provider-gutendex
 
+## 0.2.5
+
+### Patch Changes
+
+- d6432a1: Stop the weekly live-smoke from crying wolf on WAF blocks: `liveSmoke` gains an
+  opt-in `tolerateUpstreamBlock` that skips (with a warning) when the source's WAF
+  returns HTTP 403 from the runner's datacenter IP — 404s, 5xx, schema changes,
+  and empty results still fail. Applied to gutendex only, whose Cloudflare front
+  blocks GitHub Actions IPs regardless of User-Agent (verified with both a
+  descriptive bot UA and a browser UA). gutendex requests also send an explicit
+  `Accept: application/json` now.
+
+  gutendex additionally gains a `baseUrl` config: the upstream docs frame
+  gutendex.com as a test instance ("You should run your own server, but you can
+  test queries at gutendex.com"), so production/datacenter consumers can now
+  point the provider at a self-hosted Gutendex.
+
 ## 0.2.4
 
 ### Patch Changes
diff --git a/packages/provider-gutendex/package.json b/packages/provider-gutendex/package.json
index 4f1f2a6..ec1e0af 100644
--- a/packages/provider-gutendex/package.json
+++ b/packages/provider-gutendex/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@refkit/provider-gutendex",
-  "version": "0.2.4",
+  "version": "0.2.5",
   "description": "Gutendex (Project Gutenberg) provider satellite for refkit — public-domain book references, per-item copyright→license.",
   "type": "module",
   "license": "Apache-2.0",
diff --git a/packages/provider-testkit/CHANGELOG.md b/packages/provider-testkit/CHANGELOG.md
index 6260d4d..fc9fc74 100644
--- a/packages/provider-testkit/CHANGELOG.md
+++ b/packages/provider-testkit/CHANGELOG.md
@@ -1,5 +1,22 @@
 # @refkit/provider-testkit
 
+## 0.0.4
+
+### Patch Changes
+
+- d6432a1: Stop the weekly live-smoke from crying wolf on WAF blocks: `liveSmoke` gains an
+  opt-in `tolerateUpstreamBlock` that skips (with a warning) when the source's WAF
+  returns HTTP 403 from the runner's datacenter IP — 404s, 5xx, schema changes,
+  and empty results still fail. Applied to gutendex only, whose Cloudflare front
+  blocks GitHub Actions IPs regardless of User-Agent (verified with both a
+  descriptive bot UA and a browser UA). gutendex requests also send an explicit
+  `Accept: application/json` now.
+
+  gutendex additionally gains a `baseUrl` config: the upstream docs frame
+  gutendex.com as a test instance ("You should run your own server, but you can
+  test queries at gutendex.com"), so production/datacenter consumers can now
+  point the provider at a self-hosted Gutendex.
+
 ## 0.0.3
 
 ### Patch Changes
diff --git a/packages/provider-testkit/package.json b/packages/provider-testkit/package.json
index 6480189..56b4054 100644
--- a/packages/provider-testkit/package.json
+++ b/packages/provider-testkit/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@refkit/provider-testkit",
-  "version": "0.0.3",
+  "version": "0.0.4",
   "private": true,
   "description": "Conformance test helpers for refkit provider satellites (internal, not published).",
   "type": "module",