diff --git a/CHANGELOG.md b/CHANGELOG.md
index 13fbb0c..60e6d7b 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -4,6 +4,8 @@ All notable changes to Primora. Format follows [Keep a Changelog](https://keepac
 
 ## [Unreleased]
 
+## [0.8.2] - 2026-09-28
+
 ### Fixed
 
 - **Self-hosted sign-up works on any origin** — trusted origins are now derived from the request's public host (forwarded by nginx), so browsing the instance via a LAN IP, hostname, or custom port no longer fails every auth POST with a 403. Static `VITE_APP_URL`/`AUTH_BASE_URL` origins and `BETTER_AUTH_TRUSTED_ORIGINS` still apply.
diff --git a/apps/desktop/package.json b/apps/desktop/package.json
index 6b629c0..0d8b9de 100644
--- a/apps/desktop/package.json
+++ b/apps/desktop/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@primora/desktop",
-  "version": "0.8.1",
+  "version": "0.8.2",
   "private": true,
   "description": "Primora desktop shell — thin Tauri client for a self-hosted deployment",
   "scripts": {
diff --git a/apps/desktop/src-tauri/tauri.conf.json b/apps/desktop/src-tauri/tauri.conf.json
index 0312480..94d73b1 100644
--- a/apps/desktop/src-tauri/tauri.conf.json
+++ b/apps/desktop/src-tauri/tauri.conf.json
@@ -1,7 +1,7 @@
 {
   "$schema": "https://schema.tauri.app/config/2",
   "productName": "Primora",
-  "version": "0.8.1",
+  "version": "0.8.2",
   "identifier": "dev.tdvorak.primora",
   "build": {
     "frontendDist": "../ui"
diff --git a/package.json b/package.json
index 5ebdbdb..d265877 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "primora",
-  "version": "0.8.1",
+  "version": "0.8.2",
   "private": true,
   "packageManager": "npm@9.2.0",
   "workspaces": [