diff --git a/CHANGELOG.md b/CHANGELOG.md
index c68473c..f864677 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -2022,3 +2022,17 @@
 * fix: treat email addresses case-insensitively ([#37600](https://github.com/go-gitea/gitea/issues/37600))
 * Fix color regressions, add `priority` color ([#37417](https://github.com/go-gitea/gitea/issues/37417)) ([#37421](https://github.com/go-gitea/gitea/issues/37421))
 
+[1.38.3]
+* Update gitea to 1.26.3
+* [Full Changelog](https://github.com/go-gitea/gitea/releases/tag/v1.26.3)
+* fix(actions)!: require merged MR to bypass fork MR approval gate ([#38010](https://github.com/go-gitea/gitea/issues/38010)) ([#38041](https://github.com/go-gitea/gitea/issues/38041))
+* fix(hostmatcher): patch incorrect private list ([#38170](https://github.com/go-gitea/gitea/issues/38170)) ([#38173](https://github.com/go-gitea/gitea/issues/38173))
+* fix: Various security fixes ([#38103](https://github.com/go-gitea/gitea/issues/38103)) ([#38151](https://github.com/go-gitea/gitea/issues/38151))
+* fix: allow git clone of private repos with anonymous code access ([#38074](https://github.com/go-gitea/gitea/issues/38074)) ([#38146](https://github.com/go-gitea/gitea/issues/38146))
+* fix(hostmatcher): block reserved IP ranges from external/private filters ([#38039](https://github.com/go-gitea/gitea/issues/38039)) ([#38059](https://github.com/go-gitea/gitea/issues/38059))
+* feat(api): add Link header in ListForks ([#38052](https://github.com/go-gitea/gitea/issues/38052)) ([#38063](https://github.com/go-gitea/gitea/issues/38063))
+* fix: Fix the panic when ssh remote lfs endpoint parsing failure ([#38026](https://github.com/go-gitea/gitea/issues/38026)) ([#38158](https://github.com/go-gitea/gitea/issues/38158))
+* fix(api): nil pointer panic when filtering tracked times by a non-existent user ([#38112](https://github.com/go-gitea/gitea/issues/38112)) ([#38115](https://github.com/go-gitea/gitea/issues/38115))
+* fix(releases): generate notes for initial tag ([#37697](https://github.com/go-gitea/gitea/issues/37697)) ([#37986](https://github.com/go-gitea/gitea/issues/37986))
+* fix: Fix issue target branch selection for non-collaborators ([#36916](https://github.com/go-gitea/gitea/issues/36916)) ([#38164](https://github.com/go-gitea/gitea/issues/38164))
+
diff --git a/CloudronManifest.json b/CloudronManifest.json
index fc15f42..1aad0aa 100644
--- a/CloudronManifest.json
+++ b/CloudronManifest.json
@@ -4,7 +4,7 @@
   "author": "Gitea developers",
   "description": "file://DESCRIPTION.md",
   "tagline": "A painless self-hosted Git Service",
-  "version": "1.38.2",
+  "version": "1.38.3",
   "upstreamVersion": "1.26.3",
   "healthCheckPath": "/explore",
   "httpPort": 3000,