diff --git a/CHANGELOG.md b/CHANGELOG.md
index 0b19d59..747d5fa 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -10,6 +10,19 @@ for what changed inside the apps it composes.
 
 ## [Unreleased]
 
+## [1.17.0] - 2026-07-28
+
+### Added
+- **proxy's host modal now has a footer (created/updated-by/on metadata) and a linkable `/hosts/{host}` URL**, migrated onto the same shared `app.modal` component as sso-manager-node's resource modal — continuing the entity-modal standardization across the stack.
+
+### Fixed
+- **proxy: the Let's-Encrypt challenge-type/wildcard-matching visibility logic could stop reacting to the hostname field after the first Add/Edit host**, and **the SSO allow-list autocomplete could go empty starting on the second Add/Edit** — both were DOM-rebuild timing bugs in the same class as the resource-modal fixes already shipped.
+- **sso-manager-node: the resource modal's "Associated LDAP Groups" autocomplete went empty after the first Add/Edit** — same DOM-rebuild timing bug, now fixed.
+
+### Bumped
+- sso-manager-node -> [v1.8.1](https://github.com/theta42/sso-manager-node/releases/tag/v1.8.1)
+- proxy -> [v1.6.0](https://github.com/theta42/proxy/releases/tag/v1.6.0)
+
 ## [1.16.0] - 2026-07-28
 
 ### Added
diff --git a/proxy b/proxy
index 44c2ec3..130d4a2 160000
--- a/proxy
+++ b/proxy
@@ -1 +1 @@
-Subproject commit 44c2ec3fddcc4de8d79125f34c0245abc4c1a758
+Subproject commit 130d4a2c9b1ab3c8efd5a5ab3dd9b148bbe60d4c
diff --git a/sso-manager-node b/sso-manager-node
index 782ef69..b54da5c 160000
--- a/sso-manager-node
+++ b/sso-manager-node
@@ -1 +1 @@
-Subproject commit 782ef69fb8865e002f249c02ac421dafa3f7f95b
+Subproject commit b54da5c64cea05f4644c19ec8e5853a942133c6b