diff --git a/CHANGELOG.md b/CHANGELOG.md
index b1bbdc8..b796e94 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -8,6 +8,12 @@ orchestration code; see each submodule's own `CHANGELOG.md`
 [sso-manager-node](https://github.com/theta42/sso-manager-node/blob/master/CHANGELOG.md))
 for what changed inside the apps it composes.
 
+## [v1.25.0] - 2026-08-01
+
+- Added OpenBao (Vault) container for secrets management and native UI proxying.
+- Updated `sso-manager-node` to v1.14.0 (Discovery and Vault integration).
+- Updated `proxy` to v1.12.0.
+
 ## [Unreleased]
 
 ## [1.23.0] - 2026-07-31
diff --git a/proxy b/proxy
index 3d32fb3..30835ba 160000
--- a/proxy
+++ b/proxy
@@ -1 +1 @@
-Subproject commit 3d32fb3044027edbff10ef7911d5939dddb9899e
+Subproject commit 30835baaebd35555b241b298305fe4308b39f275
diff --git a/sso-manager-node b/sso-manager-node
index ecc9b62..aa17981 160000
--- a/sso-manager-node
+++ b/sso-manager-node
@@ -1 +1 @@
-Subproject commit ecc9b6284229a41fd809e220691f327fe17c5b9b
+Subproject commit aa17981c157963cb693d3cd3745ec6ecf33f271d