diff --git a/CHANGELOG.md b/CHANGELOG.md
index dd65af8..18805e0 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -2,6 +2,29 @@
 
 All notable changes to this project will be documented in this file.
 
+## [0.8.0] - Karm (2026-05-16)
+
+### Added
+
+- Demo mode: per-session vaults, auto-cleanup, proxy allowlist, login blocking. See [examples/demo/](examples/demo/).
+- No-op guard in the bridge plugin and headless-sync plugin when loaded outside Ignis.
+- "Open workspace in new tab" command now loads the workspace preset rather than the per-tab live state.
+- Real digests for `crypto.createHash` (SHA-1/SHA-256/SHA-512/MD5) via `@noble/hashes`.
+- `LEGAL.md` with the full EU Software Directive rationale.
+
+### Changed
+
+- Obsidian pinned at 1.12.7.
+- Entrypoint downloads `.asar.gz` instead of `.deb`. Smaller image, simpler extraction.
+- FS shim path translation moved from the transport layer up to the shim's public surface, so caches and metadata operate only on physical paths.
+- Readme cleanup.
+
+### Fixed
+
+- `navigator.vibrate` made conditional. Firefox setups with `dom.vibrator.enabled` off no longer hit a `TypeError`.
+- Write coalescer no longer holds HTTP responses open for the full debounce window. Buffered writes return immediately with synthetic mtime/size; only the first/stale writes wait on disk.
+- Prefetch race in workspaces-per-tab resolved by the path-translation refactor.
+
 ## [0.7.6] - Orm (2026-04-05)
 
 ### Changed
diff --git a/Dockerfile b/Dockerfile
index da99925..afcf5d2 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -17,6 +17,8 @@ RUN npm run build
 # On first run, the entrypoint downloads Obsidian.
 FROM node:22-slim
 
+LABEL com.thiefling.ignis.obsidian-version="1.12.7"
+
 RUN apt-get update && apt-get install -y --no-install-recommends \
   ca-certificates curl gosu \
   && rm -rf /var/lib/apt/lists/*
diff --git a/package-lock.json b/package-lock.json
index fa3f700..c0b14b1 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -1,12 +1,12 @@
 {
   "name": "ignis",
-  "version": "0.7.6",
+  "version": "0.8.0",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "ignis",
-      "version": "0.7.6",
+      "version": "0.8.0",
       "dependencies": {
         "archiver": "^7.0.1",
         "chokidar": "^3.6.0",
diff --git a/package.json b/package.json
index edd5e24..4367110 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "ignis",
-  "version": "0.7.6",
+  "version": "0.8.0",
   "private": true,
   "description": "An Electron shim and server bridge for running Obsidian in a browser.",
   "scripts": {
diff --git a/plugin/manifest.json b/plugin/manifest.json
index 16db9a2..713b3c6 100644
--- a/plugin/manifest.json
+++ b/plugin/manifest.json
@@ -1,7 +1,7 @@
 {
   "id": "ignis-bridge",
   "name": "Ignis Bridge",
-  "version": "0.7.6",
+  "version": "0.8.0",
   "minAppVersion": "1.12.4",
   "description": "Additional Ignis specific functionality and ignis plugin management.",
   "author": "Nystik",