diff --git a/CHANGELOG.md b/CHANGELOG.md
index 3d8e6ed..ef575d1 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -7,6 +7,11 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [0.20.43] - 2026-04-21
+
+### Added
+- `POST /api/v1/auth/setup` bootstrap endpoint: creates the first admin user when no users exist, enabling Docker-based deployments to initialise via HTTP without direct filesystem DB access. Returns 403 once any user exists.
+
 ## [0.20.42] - 2026-04-21
 
 ### Added
diff --git a/package-lock.json b/package-lock.json
index e4d6759..27e9afe 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -1,12 +1,12 @@
 {
   "name": "oikos",
-  "version": "0.20.42",
+  "version": "0.20.43",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "oikos",
-      "version": "0.20.42",
+      "version": "0.20.43",
       "license": "MIT",
       "dependencies": {
         "bcrypt": "^6.0.0",