diff --git a/Tests/third_party_mode_contract_test.sh b/Tests/third_party_mode_contract_test.sh
index 93e5e80..a85dbb8 100755
--- a/Tests/third_party_mode_contract_test.sh
+++ b/Tests/third_party_mode_contract_test.sh
@@ -124,7 +124,7 @@ test -s "$ROOT/docs/onboarding-screenshots/shadowrocket/shadowrocket-module-impo
 grep -q 'presentSuccessfulOperationTip(.activation)' "$ROOT/App/MapHomeView.swift" || fail "third-party save must present the activation tip"
 grep -q 'presentSuccessfulOperationTip(.deactivation)' "$ROOT/App/MapHomeView.swift" || fail "third-party clear must present the deactivation tip"
 grep -q 'if spoofState == .active' "$ROOT/App/MapHomeView.swift" || fail "manual help must follow the shared spoof state"
-grep -q 'MARKETING_VERSION: "1.0.5"' "$ROOT/project.yml" || fail "marketing version must be 1.0.5"
-grep -q 'CURRENT_PROJECT_VERSION: "6"' "$ROOT/project.yml" || fail "build version must be 6"
+grep -q 'MARKETING_VERSION: "1.0.6"' "$ROOT/project.yml" || fail "marketing version must be 1.0.6"
+grep -q 'CURRENT_PROJECT_VERSION: "7"' "$ROOT/project.yml" || fail "build version must be 7"
 
 echo "PASS: third-party proxy mode contract"
diff --git a/docs/CHANGELOG.md b/docs/CHANGELOG.md
index 8ef3d1d..9522b87 100644
--- a/docs/CHANGELOG.md
+++ b/docs/CHANGELOG.md
@@ -4,6 +4,7 @@
 
 ## 已发布
 
+- [v1.0.6](https://github.com/xweiba/location-spoofer/releases/tag/v1.0.6) — 2026-09-01
 - [v1.0.5](https://github.com/xweiba/location-spoofer/releases/tag/v1.0.5) — 2026-08-10
 - [v1.0.4](https://github.com/xweiba/location-spoofer/releases/tag/v1.0.4) — 2026-08-09
 - [v1.0.3](https://github.com/xweiba/location-spoofer/releases/tag/v1.0.3) — 2026-08-09
diff --git a/docs/releases/v1.0.6.md b/docs/releases/v1.0.6.md
new file mode 100644
index 0000000..d7f6d6c
--- /dev/null
+++ b/docs/releases/v1.0.6.md
@@ -0,0 +1,31 @@
+# v1.0.6
+
+发布日期：2026-09-01
+
+## 主要更新
+
+- 第三方代理模式完全改用上游 Yu9191/wloc 的模块与脚本，订阅地址直接指向上游（支持 gh-proxy 国内镜像），项目不再维护自有模块/脚本副本，避免再因版本漂移失效。
+- 扩展 Apple 定位域名拦截：新增 `gsp-ssl.ls.apple.com`、`bluedot.is.autonavi.com`（国内设备真实定位域名），内置代理同步覆盖。
+- 第三方模式新增「随机扰动」开关：同步坐标时给目标点添加随机偏移（默认 50 米），防止位置固定在同一点。
+- 运动状态模拟改为仅 APP 模式可用（上游脚本不支持第三方运动模拟）。
+- 移除脚本版本检测：不再请求 `/wloc-settings/version`，第三方模式基础坐标同步不再受版本协议影响。
+- 新增 iOS 27 beta 6 起系统禁止对 `gs-loc.apple.com` 进行 MITM 拦截的警告提示（App 引导与 README 同步）。
+
+## 提交变更总结
+
+- `b530d52` feat: drop script version detection; split motion vs perturbation by mode
+- `135e26e` feat: point third-party mode at upstream Yu9191 modules
+- `d35d5c7` feat: vendor upstream modules verbatim, mirror via gh-proxy
+- `cce2aef` feat: wire randomRadius perturbation argument into all modules
+- `9cea683` fix: point third-party modules at upstream wloc scripts
+- `fb0ca96` fix: sync third-party wloc scripts with upstream
+- `a666f17` fix: intercept gsp-ssl.ls.apple.com and bluedot wloc endpoints
+
+## 自签安装
+
+- Release 附件为未签名 IPA，安装前需要自行签名。
+- 可使用免费 Apple ID 和 Impactor 完成签名安装，无需付费开发者账号。
+- 签名时请保留 Bundle ID `com.paopaolabs.location-spoofer`、App Group `group.com.paopaolabs.location-spoofer` 及原有 entitlements。
+- 免费 Apple ID 签名通常只有 7 天有效期，到期后需要重新签名安装。
+
+<!-- commit-range: v1.0.5..v1.0.6 -->
diff --git a/project.yml b/project.yml
index 9627568..dd68623 100644
--- a/project.yml
+++ b/project.yml
@@ -8,8 +8,8 @@ options:
 settings:
   base:
     SWIFT_VERSION: "5.9"
-    MARKETING_VERSION: "1.0.5"
-    CURRENT_PROJECT_VERSION: "6"
+    MARKETING_VERSION: "1.0.6"
+    CURRENT_PROJECT_VERSION: "7"
     CODE_SIGN_STYLE: Manual
     CODE_SIGNING_ALLOWED: "NO"
     CODE_SIGNING_REQUIRED: "NO"
diff --git a/version.txt b/version.txt
index e3da699..1956613 100644
--- a/version.txt
+++ b/version.txt
@@ -1,5 +1,5 @@
 {
-  "latestVersion": "1.0.5",
+  "latestVersion": "1.0.6",
   "minimumSupportedVersion": "1.0.0",
   "communityPromptClients": ["surge", "quantumultX", "loon", "stash", "egern"]
 }