diff --git a/docs/source/CHANGELOG.rst b/docs/source/CHANGELOG.rst
index 084c901b..b4f26a87 100644
--- a/docs/source/CHANGELOG.rst
+++ b/docs/source/CHANGELOG.rst
@@ -1,13 +1,18 @@
 ChangeLog
 =========
 
+0.19.0 (2024-03-18)
+-------------------
+
+* Support cosign signing for container images
+
 0.18.0 (2024-03-18)
 -------------------
 
 * Generate SBOM attestations for manifest lists
 
 0.17.0 (2024-02-27)
-------------------
+-------------------
 
 * Should not call IIB if bundle is opted in fbc and targets OCP >=4.11
 
diff --git a/requirements.txt b/requirements.txt
index abd4624d..465132d3 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -12,4 +12,5 @@ iiblib
 pubtools-iib
 kerberos
 marshmallow
-urllib3<2
\ No newline at end of file
+urllib3<2
+pubtools-sign>0.0.6
diff --git a/setup.py b/setup.py
index 74545ab7..28e4ce5f 100644
--- a/setup.py
+++ b/setup.py
@@ -113,7 +113,7 @@ def get_dependency_links():
 
 setup(
     name="pubtools-quay",
-    version="0.18.0",
+    version="0.19.0",
     description="Pubtools-quay",
     long_description=long_description,
     long_description_content_type="text/x-rst",