diff --git a/CHANGELOG.md b/CHANGELOG.md
index d3c62d1..c18103a 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -7,6 +7,31 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [0.17.2](https://github.com/gaardhus/annox/compare/v0.17.1...v0.17.2) - 2026-10-23
+
+### Added
+
+- Warn about event files that aren't valid events
+
+### Fixed
+
+- Reject invalid create events instead of deriving null fields
+- Refuse to write to a workspace whose format isn't supported
+- List annotations in a workspace that can't be written to
+- *(sync)* Keep received events that couldn't be written
+- *(core)* Lock read state while merging, so concurrent marks are kept
+- *(sync)* Compare the hub's token in constant time
+- Salvage damaged read state instead of replacing it
+
+### Performance
+
+- *(core)* Replay a log in linear time
+
+### Changed
+
+- Define the read state repair message once, in core
+- Word the invalid event files warning once, in core
+
 ## [0.17.1](https://github.com/gaardhus/annox/compare/v0.17.0...v0.17.1) - 2026-10-23
 
 ### Documentation
diff --git a/Cargo.lock b/Cargo.lock
index 4ca9c5b..d9bcc2f 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -4,7 +4,7 @@ version = 4
 
 [[package]]
 name = "annox-core"
-version = "0.17.1"
+version = "0.17.2"
 dependencies = [
  "serde",
  "serde_json",
@@ -14,7 +14,7 @@ dependencies = [
 
 [[package]]
 name = "annox-lsp"
-version = "0.17.1"
+version = "0.17.2"
 dependencies = [
  "annox-core",
  "annox-sync",
@@ -34,7 +34,7 @@ dependencies = [
 
 [[package]]
 name = "annox-sync"
-version = "0.17.1"
+version = "0.17.2"
 dependencies = [
  "annox-core",
  "crossbeam-channel",
@@ -47,7 +47,7 @@ dependencies = [
 
 [[package]]
 name = "annox-wasm"
-version = "0.17.1"
+version = "0.17.2"
 dependencies = [
  "annox-core",
  "serde",
diff --git a/Cargo.toml b/Cargo.toml
index aaa3e50..5bdb017 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -4,7 +4,7 @@ resolver = "2"
 
 [workspace.package]
 # The one version of annox; releases bump it (see .github/workflows/release.yml).
-version = "0.17.1"
+version = "0.17.2"
 edition = "2021"
 license = "MIT"
 publish = false
diff --git a/editors/nvim/README.md b/editors/nvim/README.md
index 99005a4..40032fe 100644
--- a/editors/nvim/README.md
+++ b/editors/nvim/README.md
@@ -13,7 +13,7 @@ With [lazy.nvim](https://github.com/folke/lazy.nvim). The plugin lives in `edito
 ```lua
 {
   "gaardhus/annox",
-  -- tag = "v0.17.1",  -- pin the plugin to the release of your binary
+  -- tag = "v0.17.2",  -- pin the plugin to the release of your binary
   lazy = false,
   config = function(plugin)
     vim.opt.rtp:append(plugin.dir .. "/editors/nvim")
diff --git a/editors/vscode/package-lock.json b/editors/vscode/package-lock.json
index 5c8fad7..a358e25 100644
--- a/editors/vscode/package-lock.json
+++ b/editors/vscode/package-lock.json
@@ -1,12 +1,12 @@
 {
   "name": "annox",
-  "version": "0.17.1",
+  "version": "0.17.2",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "annox",
-      "version": "0.17.1",
+      "version": "0.17.2",
       "license": "MIT",
       "dependencies": {
         "diff": "^9.0.0",
diff --git a/editors/vscode/package.json b/editors/vscode/package.json
index 55ee948..a412178 100644
--- a/editors/vscode/package.json
+++ b/editors/vscode/package.json
@@ -2,7 +2,7 @@
   "name": "annox",
   "displayName": "annox",
   "description": "Portable document annotations: comments, suggestions and review threads stored in .annox/.",
-  "version": "0.17.1",
+  "version": "0.17.2",
   "publisher": "gaardhus",
   "license": "MIT",
   "private": true,