diff --git a/CHANGELOG.md b/CHANGELOG.md
index 80465ea..c68473c 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -2008,3 +2008,17 @@
 * Fix Mermaid diagrams failing when node labels contain line breaks ([#37296](https://github.com/go-gitea/gitea/issues/37296)) ([#37299](https://github.com/go-gitea/gitea/issues/37299))
 * Fix: dump with default zip type produces uncompressed zip ([#37401](https://github.com/go-gitea/gitea/issues/37401)) [#37402](https://github.com/go-gitea/gitea/issues/37402)
 
+[1.38.2]
+* Update gitea to 1.26.2
+* [Full Changelog](https://github.com/go-gitea/gitea/releases/tag/v1.26.2)
+* fix(permissions): Fix reading permission ([#37769](https://github.com/go-gitea/gitea/issues/37769))
+* fix(actions): make artifact signature payloads unambiguous ([#37707](https://github.com/go-gitea/gitea/issues/37707))
+* fix(oauth): strengthen PKCE validation and refresh token replay protection ([#37706](https://github.com/go-gitea/gitea/issues/37706))
+* fix(web): enforce token scopes on raw, media, and attachment downloads ([#37698](https://github.com/go-gitea/gitea/issues/37698))
+* feat(api): encrypt AWS creds ([#37679](https://github.com/go-gitea/gitea/issues/37679))
+* fix!: add DEFAULT_TITLE_SOURCE setting for pull request title default behavior ([#37465](https://github.com/go-gitea/gitea/issues/37465))
+* fix(pull): handle empty pull request files view to allow reviews ([#37783](https://github.com/go-gitea/gitea/issues/37783))
+* fix(actions): deadlock between PrepareRunAndInsert and UpdateTaskByState ([#37692](https://github.com/go-gitea/gitea/issues/37692))
+* fix: treat email addresses case-insensitively ([#37600](https://github.com/go-gitea/gitea/issues/37600))
+* Fix color regressions, add `priority` color ([#37417](https://github.com/go-gitea/gitea/issues/37417)) ([#37421](https://github.com/go-gitea/gitea/issues/37421))
+
diff --git a/CloudronManifest.json b/CloudronManifest.json
index ee8e298..9d925e3 100644
--- a/CloudronManifest.json
+++ b/CloudronManifest.json
@@ -4,7 +4,7 @@
   "author": "Gitea developers",
   "description": "file://DESCRIPTION.md",
   "tagline": "A painless self-hosted Git Service",
-  "version": "1.38.1",
+  "version": "1.38.2",
   "upstreamVersion": "1.26.2",
   "healthCheckPath": "/explore",
   "httpPort": 3000,