diff --git a/hub/CHANGELOG.md b/hub/CHANGELOG.md
index 47407aa1..d2928c6f 100644
--- a/hub/CHANGELOG.md
+++ b/hub/CHANGELOG.md
@@ -1,4 +1,4 @@
-## Unreleased (next: v0.173.0) — D53: a held app reaches the operator (`08` §10); R-1218: a keyed recovery package is never replaced by a key-less one
+## v0.173.0 (2026-10-27) — D53: a held app reaches the operator (`08` §10); R-1218: a keyed recovery package is never replaced by a key-less one — DEPLOYED on the operator's yes (image sha256:458bfb03…, from `29134c52`, CI 2418)
 
 - **R-972: Go 1.27.3** (`go.mod` + the builder image `golang:1.27.3-*` pinned by digest; released 2026-10-19 with a
   security fix to `crypto/x509`). `govulncheck` v1.8.0: 1 called vulnerability before (GO-2026-6809), 0 after; full
diff --git a/manifests/hub.yaml b/manifests/hub.yaml
index 365fe46e..d98d1887 100644
--- a/manifests/hub.yaml
+++ b/manifests/hub.yaml
@@ -132,7 +132,7 @@ spec:
     spec:
       containers:
         - name: hub
-          image: gitea.dooplex.hu/admin/felhom-hub:0.172.0
+          image: gitea.dooplex.hu/admin/felhom-hub:0.173.0
           ports:
             - containerPort: 8080
               name: http