diff --git a/CHANGELOG.md b/CHANGELOG.md
index 09e8ceb..047818e 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -6,7 +6,7 @@ is deliberate: see [Releasing](docs/releasing.md). Twelve releases were cut on
 live, every one of those interrupts every user. An alert people learn to ignore is
 worse than no alert, because one day it carries a security fix.
 
-## Unreleased
+## v0.8.0 — 2026-08-26
 ### Changed
 
 - **CI's python matrix is green on the self-hosted Gitea runner again.** The real
diff --git a/install.sh b/install.sh
index 917947f..d2046c4 100755
--- a/install.sh
+++ b/install.sh
@@ -18,7 +18,7 @@
 
 set -euo pipefail
 
-VERSION="0.7.0"
+VERSION="0.8.0"
 
 # The directory containing install.sh is the permanent install location.
 PATCH_DIR="$(cd "$(dirname "$0")" && pwd)"
diff --git a/patch/apply.sh b/patch/apply.sh
index 29f31b6..204518a 100755
--- a/patch/apply.sh
+++ b/patch/apply.sh
@@ -32,7 +32,7 @@
 # Derive PATCH_DIR from this script's location (parent of the patch/ directory).
 PATCH_DIR="$(cd "$(dirname "$0")/.." && pwd)"
 LOG="$PATCH_DIR/apply.log"
-VERSION="0.7.0"
+VERSION="0.8.0"
 
 # Rotate log at 512 KB to avoid unbounded growth on a system volume.
 # Keep two prior generations (.1 and .2) so the last three boots are always available.
diff --git a/patch/create_task.py b/patch/create_task.py
index 662ccd4..92318ff 100755
--- a/patch/create_task.py
+++ b/patch/create_task.py
@@ -52,7 +52,7 @@ import subprocess
 import sys
 import time
 
-__version__ = "0.7.0"
+__version__ = "0.8.0"
 
 _PATCH_DIR = os.path.dirname(os.path.dirname(os.path.abspath(__file__)))
 _STATUS_FILE = os.path.join(_PATCH_DIR, "hook_status.json")
diff --git a/recover.sh b/recover.sh
index 5787330..872591a 100755
--- a/recover.sh
+++ b/recover.sh
@@ -17,7 +17,7 @@
 #   bash /mnt/tank/truenas-truecloud-patch/patch/apply.sh
 #   systemctl restart middlewared
 
-VERSION="0.7.0"
+VERSION="0.8.0"
 
 PATCH_DIR="$(cd "$(dirname "$0")" && pwd)"
 
diff --git a/uninstall.sh b/uninstall.sh
index fe6b546..48117e6 100755
--- a/uninstall.sh
+++ b/uninstall.sh
@@ -3,7 +3,7 @@
 
 set -euo pipefail
 
-VERSION="0.7.0"
+VERSION="0.8.0"
 
 PATCH_DIR="$(cd "$(dirname "$0")" && pwd)"
 _HOOK_COMMENT='TrueCloud provider patch (S3/B2)'
diff --git a/update.sh b/update.sh
index 278c645..627ec6d 100755
--- a/update.sh
+++ b/update.sh
@@ -19,7 +19,7 @@
 
 set -euo pipefail
 
-VERSION="0.7.0"
+VERSION="0.8.0"
 
 PATCH_DIR="$(cd "$(dirname "$0")" && pwd)"
 _PREV_FILE="$PATCH_DIR/.update_previous"