diff --git a/CHANGELOG.md b/CHANGELOG.md
index 6d7648d..54bdc0c 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -4,6 +4,8 @@ All notable changes to teploy-dash are recorded here.
 
 ## [Unreleased]
 
+## [0.1.19] - 2026-10-21
+
 ### Fixed
 - **Git sources on self-hosted forges whose SSH and HTTP ports differ.**
   Repository matching now compares host and path only, ignoring scheme
@@ -14,6 +16,7 @@ All notable changes to teploy-dash are recorded here.
   scope mismatch, leaving only the server's poll timer to deploy. The
   forge API is still derived from the credential's HTTP(S) address,
   never from an SSH port. Source IDs and webhook URLs are unchanged.
+- The image bundles teploy CLI v0.1.46.
 
 ## [0.1.18] - 2026-10-20
 
diff --git a/Dockerfile b/Dockerfile
index 24a2b76..55b0806 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -30,7 +30,7 @@ RUN apk add --no-cache ca-certificates tzdata wget tini git rsync openssh-client
 # source build uses, so the image running in production was the one NOT
 # checking what it executed.
 ARG TARGETARCH
-ARG TEPLOY_VERSION=v0.1.45
+ARG TEPLOY_VERSION=v0.1.46
 RUN set -eux; \
     archive="teploy_linux_${TARGETARCH:-amd64}.tar.gz"; \
     release_url="https://github.com/useteploy/teploy-cli/releases/download/${TEPLOY_VERSION}"; \
diff --git a/Dockerfile.goreleaser b/Dockerfile.goreleaser
index 9bf456d..7ec0146 100644
--- a/Dockerfile.goreleaser
+++ b/Dockerfile.goreleaser
@@ -9,7 +9,7 @@ RUN apk add --no-cache ca-certificates tzdata wget tini git rsync openssh-client
 # Teploy CLI - used by dash to delegate deploy/rollback actions. BuildKit sets
 # TARGETARCH from the goreleaser build platform (amd64 or arm64).
 ARG TARGETARCH
-ARG TEPLOY_VERSION=v0.1.45
+ARG TEPLOY_VERSION=v0.1.46
 RUN set -eux; \
     archive="teploy_linux_${TARGETARCH}.tar.gz"; \
     release_url="https://github.com/useteploy/teploy-cli/releases/download/${TEPLOY_VERSION}"; \