diff --git a/Makefile b/Makefile
index 4225b25..fc9652f 100644
--- a/Makefile
+++ b/Makefile
@@ -1,6 +1,6 @@
 # pgloader build tool
 APP_NAME   = pgloader
-VERSION    = 3.6.7
+VERSION    = 3.6.8
 
 # use either sbcl or ccl
 CL	   = sbcl
diff --git a/debian/changelog b/debian/changelog
index 774045e..2314fbd 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,8 +1,9 @@
-pgloader (3.6.7-2) UNRELEASED; urgency=medium
+pgloader (3.6.8-1) unstable; urgency=medium
 
+  * New upstream version.
   * Depend on libsqlite3-0.
 
- -- Christoph Berg <myon@debian.org>  Mon, 26 Sep 2022 11:09:44 +0200
+ -- Christoph Berg <myon@debian.org>  Mon, 26 Sep 2022 14:24:02 +0200
 
 pgloader (3.6.7-1) unstable; urgency=medium
 
diff --git a/debian/rules b/debian/rules
index 11cd05a..f22032b 100755
--- a/debian/rules
+++ b/debian/rules
@@ -14,6 +14,11 @@ else
 SIZE=16384
 endif
 
+MAKEFILE_VERSION = $(shell awk '/^VERSION/ { print $$3 }' Makefile)
+DOC_VERSION = $(shell awk '/^release/ { print $$3 }' docs/conf.py | tr -d "'")
+SPECFILE_VERSION = $(shell awk '/^Version/ { print $$2 }' pgloader.spec)
+DEBIAN_VERSION = $(shell dpkg-parsechangelog -SVersion | cut -d- -f 1)
+
 # buildd provides a build environment where $HOME is not writable, but the
 # CL compilers here will need to fill-in a per-user cache
 export HOME = $(CURDIR)/debian/home
@@ -21,6 +26,10 @@ export HOME = $(CURDIR)/debian/home
 override_dh_auto_clean:
 	dh_auto_clean
 	rm -rf debian/home
+	# sanity checks on version number
+	[ "$(MAKEFILE_VERSION)" = "$(DOC_VERSION)" ] # Makefile = docs/conf.py version
+	[ "$(MAKEFILE_VERSION)" = "$(SPECFILE_VERSION)" ] # Makefile = pgloader.spec version
+	[ "$(MAKEFILE_VERSION)" = "$(DEBIAN_VERSION)" ] # Makefile = debian/changelog version
 
 override_dh_auto_build-indep:
 	# do nothing
diff --git a/docs/conf.py b/docs/conf.py
index 35c0c3e..130dc2a 100644
--- a/docs/conf.py
+++ b/docs/conf.py
@@ -57,7 +57,7 @@ author = 'Dimitri Fontaine'
 # The short X.Y version.
 version = '3.6'
 # The full version, including alpha/beta/rc tags.
-release = '3.6.7'
+release = '3.6.8'
 
 # The language for content autogenerated by Sphinx. Refer to documentation
 # for a list of supported languages.
diff --git a/pgloader.spec b/pgloader.spec
index 09124f0..89f01bf 100644
--- a/pgloader.spec
+++ b/pgloader.spec
@@ -1,6 +1,6 @@
 Summary:            extract, transform and load data into PostgreSQL
 Name:               pgloader
-Version:            3.6.7
+Version:            3.6.8
 Release:            22%{?dist}
 License:            The PostgreSQL Licence
 Group:              System Environment/Base