diff --git a/.version b/.version
index 142464b..af88ba8 100644
--- a/.version
+++ b/.version
@@ -1 +1 @@
-0.11.0
\ No newline at end of file
+0.11.1
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 15bc4ef..c405068 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,5 +1,11 @@
 # Change Log
 
+## [0.11.1](https://github.com/auth0/Guardian.Android/tree/0.11.1) (2026-08-28)
+[Full Changelog](https://github.com/auth0/Guardian.Android/compare/0.11.0...0.11.1)
+
+**Fixed**
+- Fix `ClassCastException` when fetching a rich consent with an Android Keystore-backed enrollment key (see [PR](https://github.com/auth0/Guardian.Android/pull/151)). `RichConsentsAPIClient` signed the DPoP assertion by casting the enrollment `PrivateKey` to `java.security.interfaces.RSAPrivateKey`; hardware-backed `AndroidKeyStoreRSAPrivateKey` does not implement that interface, so `fetch()` crashed. The assertion is now signed via `java.security.Signature` ("SHA256withRSA"), which accepts any `PrivateKey` — restoring compatibility with both Keystore and plain in-memory RSA keys.
+
 ## [0.11.0](https://github.com/auth0/Guardian.Android/tree/0.11.0) (2026-07-23)
 [Full Changelog](https://github.com/auth0/Guardian.Android/compare/0.10.2...0.11.0)