diff --git a/manifests/webpage.yaml b/manifests/webpage.yaml
index 8d9acc3a..c854aa01 100644
--- a/manifests/webpage.yaml
+++ b/manifests/webpage.yaml
@@ -344,7 +344,7 @@ spec:
           image: registry.k8s.io/git-sync/git-sync:v4.4.0
           args:
             - --repo=http://gitea.gitea-system.svc.cluster.local:3000/admin/felhom.eu.git
-            - --ref=installer-v1.34.0
+            - --ref=installer-v1.35.0
             - --root=/git-scripts
             - --link=current
             - --period=30s
@@ -390,7 +390,7 @@ spec:
           image: registry.k8s.io/git-sync/git-sync:v4.4.0
           args:
             - --repo=http://gitea.gitea-system.svc.cluster.local:3000/admin/felhom.eu.git
-            - --ref=installer-v1.34.0
+            - --ref=installer-v1.35.0
             - --root=/git-scripts
             - --link=current
             - --one-time
diff --git a/scripts/CHANGELOG.md b/scripts/CHANGELOG.md
index 7d63065a..3f5119c7 100644
--- a/scripts/CHANGELOG.md
+++ b/scripts/CHANGELOG.md
@@ -14,7 +14,7 @@ case FAILs; an imported-only finding counted as called → the govulncheck cases
 v1.1.4 to v1.8.0 (v1.1.4 cannot read Go 1.27 code; `SCANNERS.md` §5). First scan of today's `main` in all four repos:
 `documentation/audits/night-2026-10-19/P7/triage.md` — 0 called vulnerabilities, 0 real secrets.
 
-## 2026-10-19 — felhom-host-install.sh 1.35.0 (NOT published): the hub's „live box" 409 is worded (R-1167)
+## 2026-10-19 — felhom-host-install.sh 1.35.0 (tag `installer-v1.35.0`, published on the operator's yes 2026-10-20): the hub's „live box" 409 is worded (R-1167)
 
 Written for the night brief of 2026-10-19, Part 6; **not published** (publishing is a tag `installer-v1.35.0` plus the
 website manifest's ref — the operator's word). Since hub 0.161.0 (R-1159) a re-run against a customer whose box is