diff --git a/CHANGELOG.md b/CHANGELOG.md
index 32e0370..247947f 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -10,6 +10,28 @@ for what changed inside the apps it composes.
 
 ## [Unreleased]
 
+## [1.7.0] - 2026-07-27
+
+### Bumped
+- sso-manager-node -> [v1.5.1](https://github.com/theta42/sso-manager-node/releases/tag/v1.5.1)
+- jump-host -> [v1.5.0](https://github.com/theta42/jump-host/releases/tag/v1.5.0)
+
+Two production bugs fixed: `PUT /api/user/:uid` 500'd with an LDAP
+`ObjectClassViolationError` when setting `sshPublicKey` on any account
+predating the `ldapPublicKey` objectClass (notably the bootstrap admin) —
+and the exact same bug, in the shared `@simpleworkjs/ldap` package's
+`addSshKey`, was silently aborting SSH connections at jump-host's
+key-injection step for the same class of accounts. Both are fixed by
+ensuring the objectClass is present before writing the attribute. Also
+fixed: the Directory's "add resource" modal left the parent-Service
+dropdown blank when adding an OAuth Integration.
+
+Jump-host's web dashboard also gained a "Hosts you can reach" list
+(admins see "All hosts") — previously it only showed usage metrics with
+no way to see your actual access from the browser.
+
+No `setup.sh`, compose, or config change.
+
 ## [1.6.0] - 2026-07-26
 
 ### Bumped
diff --git a/jump-host b/jump-host
index a56a314..fd863b8 160000
--- a/jump-host
+++ b/jump-host
@@ -1 +1 @@
-Subproject commit a56a31421d494992fc271095b8bf5c4c6aaf4428
+Subproject commit fd863b89caedef9f8079dba5ce28e86acb5cc918
diff --git a/sso-manager-node b/sso-manager-node
index 59ae308..5665504 160000
--- a/sso-manager-node
+++ b/sso-manager-node
@@ -1 +1 @@
-Subproject commit 59ae30897ba5bfed9b6cb643ff32ec1e21a67e58
+Subproject commit 5665504bc121bcce94abcf6bd29bb63b9ffa74e1