diff --git a/ordinis-admin-ui/CHANGELOG.md b/ordinis-admin-ui/CHANGELOG.md
index 82bc4ba..2e59408 100644
--- a/ordinis-admin-ui/CHANGELOG.md
+++ b/ordinis-admin-ui/CHANGELOG.md
@@ -3,6 +3,20 @@
 Auto-generated by semantic-release based on conventional commits.
 See `.releaserc.json` for release rules.
 
+## [2.17.0](https://git.nstart.cloud/2-6/2-6-4/terravault/ordinis/compare/v2.16.4...v2.17.0) (2026-05-13)
+
+### ✨ Features
+
+* **auth:** Phase 1d — backend role enforcement для workflow ([24aa94d](https://git.nstart.cloud/2-6/2-6-4/terravault/ordinis/commit/24aa94d13007b7d2d9716a6afb7fdbc54a32d8ba))
+
+### ♻️ Refactoring
+
+* **auth:** domain-specific role names (consistent convention) ([c5b00ff](https://git.nstart.cloud/2-6/2-6-4/terravault/ordinis/commit/c5b00ff62314942f6b2cee09993d9ddd8648e8e2))
+
+### 📝 Docs
+
+* **rbac:** добавить матрицу realm-ролей Keycloak ([1dba947](https://git.nstart.cloud/2-6/2-6-4/terravault/ordinis/commit/1dba9476db036d4f5688d409aae4c39b5b5a441c))
+
 ## [2.16.4](https://git.nstart.cloud/2-6/2-6-4/terravault/ordinis/compare/v2.16.3...v2.16.4) (2026-05-13)
 
 ### 🐛 Fixes
diff --git a/ordinis-admin-ui/package.json b/ordinis-admin-ui/package.json
index 052cb6b..09514a2 100644
--- a/ordinis-admin-ui/package.json
+++ b/ordinis-admin-ui/package.json
@@ -1,7 +1,7 @@
 {
   "name": "ordinis-admin-ui",
   "private": true,
-  "version": "2.16.4",
+  "version": "2.17.0",
   "type": "module",
   "scripts": {
     "copy-changelog": "node scripts/copy-changelog.mjs",