diff --git a/ordinis-admin-ui/CHANGELOG.md b/ordinis-admin-ui/CHANGELOG.md
index 9327195..fbc6ef4 100644
--- a/ordinis-admin-ui/CHANGELOG.md
+++ b/ordinis-admin-ui/CHANGELOG.md
@@ -3,6 +3,12 @@
 Auto-generated by semantic-release based on conventional commits.
 See `.releaserc.json` for release rules.
 
+## [2.45.3](https://git.nstart.cloud/2-6/2-6-4/terravault/ordinis/compare/v2.45.2...v2.45.3) (2026-05-27)
+
+### 🐛 Fixes
+
+* **security:** CSO findings — non-root containers + .env gitignore + actuator hardening ([7abff8f](https://git.nstart.cloud/2-6/2-6-4/terravault/ordinis/commit/7abff8f73ff9a042a5d03b81654827eb427fa981)), closes [#1](https://git.nstart.cloud/2-6/2-6-4/terravault/ordinis/issues/1) [#2](https://git.nstart.cloud/2-6/2-6-4/terravault/ordinis/issues/2) [#3](https://git.nstart.cloud/2-6/2-6-4/terravault/ordinis/issues/3)
+
 ## [2.45.2](https://git.nstart.cloud/2-6/2-6-4/terravault/ordinis/compare/v2.45.1...v2.45.2) (2026-05-26)
 
 ### 🐛 Fixes
diff --git a/ordinis-admin-ui/package.json b/ordinis-admin-ui/package.json
index ad71365..d166c80 100644
--- a/ordinis-admin-ui/package.json
+++ b/ordinis-admin-ui/package.json
@@ -1,7 +1,7 @@
 {
   "name": "ordinis-admin-ui",
   "private": true,
-  "version": "2.45.2",
+  "version": "2.45.3",
   "type": "module",
   "scripts": {
     "copy-changelog": "node scripts/copy-changelog.mjs",