diff --git a/.version b/.version
index 6aba2b24..0062ac97 100644
--- a/.version
+++ b/.version
@@ -1 +1 @@
-4.2.0
+5.0.0
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 11526bcb..e447cd31 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,5 +1,28 @@
 # Change Log
 
+## [5.0.0](https://github.com/auth0/auth0-java/tree/5.0.0) (2026-08-19)
+[Full Changelog](https://github.com/auth0/auth0-java/compare/4.2.0...5.0.0)
+
+A complete migration guide is available at [v5_MIGRATION_GUIDE](v5_MIGRATION_GUIDE.md).
+
+**Breaking**
+- feat: add support for Keys Network ACLs, 3P client access, XAA connection profiles and nullable response fields
+  [\#918](https://github.com/auth0/auth0-java/pull/918) ([fern-api[bot]](https://github.com/apps/fern-api))
+  - **Nullable response fields** — 32 getters across 8 response types change from `Optional<T>` to `OptionalNullable<T>`, so the SDK preserves the nullability declared in the API definition. 
+**Added**
+- feat: add support for Keys Network ACLs, 3P client access, XAA connection profiles and nullable response fields
+  [\#918](https://github.com/auth0/auth0-java/pull/918) ([fern-api[bot]](https://github.com/apps/fern-api))
+  - **Keys Network ACLs** — new `keys().networkAcls()` sub-client with `list`, `create`, and `get` against `/api/v2/keys/network-acls`, plus the `read:network_acl_keys` and `create:network_acl_keys` scopes. 
+  - **Third-party (3P) client access** — `third_party_client_access` on the client `my_organization_configuration` object across `POST`/`GET`/`GET {id}`/`PATCH {id}` on `/clients`
+  - **Cross-App Access (XAA)** — `cross_app_access_resource_app` on the connection-profile request/response types and `ConnectionProfile`
+  - Misc: `useOauthSpecScope` on the OIDC/Okta connection options types; `matchAll` on `NetworkAclRule`.
+  - New typed error branches: `409 Conflict` and `400 Bad Request` on Flows; `400 Bad Request` and `404 Not Found` on Forms.
+- feat: allow custom telemetry for SDKs built on auth0-java [\#916](https://github.com/auth0/auth0-java/pull/916) ([tanya732](https://github.com/tanya732))
+
+**Changed**
+- feat: add Migration Guide V5 [\#919](https://github.com/auth0/auth0-java/pull/919) ([tanya732](https://github.com/tanya732))
+  - Adds `v5_MIGRATION_GUIDE.md` and removes `v3_MIGRATION_GUIDE.md`, now that v2 is well past end of support. Migration guides are retained for the two most recent majors.
+
 ## [4.2.0](https://github.com/auth0/auth0-java/tree/4.2.0) (2026-08-05)
 [Full Changelog](https://github.com/auth0/auth0-java/compare/4.1.0...4.2.0)
 
diff --git a/README.md b/README.md
index db760075..f97689fd 100644
--- a/README.md
+++ b/README.md
@@ -40,14 +40,14 @@ Add the dependency via Maven:
 <dependency>
   <groupId>com.auth0</groupId>
   <artifactId>auth0</artifactId>
-  <version>4.2.0</version>
+  <version>5.0.0</version>
 </dependency>
 ```
 
 or Gradle:
 
 ```gradle
-implementation 'com.auth0:auth0:4.2.0'
+implementation 'com.auth0:auth0:5.0.0'
 ```
 
 ### Configure the SDK
@@ -64,7 +64,7 @@ AuthAPI auth = AuthAPI.newBuilder("{YOUR_DOMAIN}", "{YOUR_CLIENT_ID}", "{YOUR_CL
 
 #### Management API Client
 
-The Management API client is based on the [Management API Docs](https://auth0.com/docs/api/management/v2). In v3, the Management API is Fern-generated and uses `ManagementApi` as the entry point.
+The Management API client is based on the [Management API Docs](https://auth0.com/docs/api/management/v2). The Management API is Fern-generated and uses `ManagementApi` as the entry point.
 
 Create a `ManagementApi` instance with a static token: