diff --git a/hub/CHANGELOG.md b/hub/CHANGELOG.md
index 08a0fef..4926f2e 100644
--- a/hub/CHANGELOG.md
+++ b/hub/CHANGELOG.md
@@ -1,5 +1,13 @@
 # Felhom Hub — Changelog
 
+## v0.43.1 — Git Sync form hint: credentials are optional (2026-07-10)
+
+Pairs with controller v0.112.0 (anonymous registry self-update). The config editor's Git Sync section
+looked load-bearing; in truth the credentials matter only for a private app catalog — version discovery
+and self-update work without them since controller v0.112.0. One template hint added
+(`config_form.html`): "Opcionális — csak privát alkalmazás-katalógushoz. A verziófrissítés enélkül is
+működik." No behavior change.
+
 ## v0.43.0 — Remote app-log diagnostics: copyable issues + error context + on-demand log tails (2026-07-10)
 
 Pairs with controller v0.111.0. Motivated live: Peti's CWA NFS issue was visible in Known Issues but
diff --git a/hub/internal/web/templates/config_form.html b/hub/internal/web/templates/config_form.html
index 10bf2c6..7ce9338 100644
--- a/hub/internal/web/templates/config_form.html
+++ b/hub/internal/web/templates/config_form.html
@@ -87,6 +87,7 @@
 
             <details class="card" {{if index .Overrides "git"}}open{{end}}>
                 <summary><h2 style="display:inline">Git Sync</h2></summary>
+                <p class="text-muted" style="margin: 0.5rem 0 0; font-size: 0.85rem;">Opcionális — csak privát alkalmazás-katalógushoz. A verziófrissítés enélkül is működik.</p>
                 <div class="form-grid" style="margin-top: 1rem;">
                     <div class="form-group">
                         <label for="git_username">Git Username</label>