diff --git a/argocd/manifests/tailscale-operator-ringtail/proxyclass-image.yaml b/argocd/manifests/tailscale-operator-ringtail/proxyclass-image.yaml
index b585e22..d1bf2a4 100644
--- a/argocd/manifests/tailscale-operator-ringtail/proxyclass-image.yaml
+++ b/argocd/manifests/tailscale-operator-ringtail/proxyclass-image.yaml
@@ -6,6 +6,6 @@ spec:
   statefulSet:
     pod:
       tailscaleContainer:
-        image: registry.ops.eblu.me/blumeops/tailscale:v1.94.2-67af7a8-nix
+        image: registry.ops.eblu.me/blumeops/tailscale:v1.94.2-0108b68-nix
       tailscaleInitContainer:
-        image: registry.ops.eblu.me/blumeops/tailscale:v1.94.2-67af7a8-nix
+        image: registry.ops.eblu.me/blumeops/tailscale:v1.94.2-0108b68-nix
diff --git a/docs/changelog.d/+tailscale-main-sha-rebuild.infra.md b/docs/changelog.d/+tailscale-main-sha-rebuild.infra.md
new file mode 100644
index 0000000..24bb81c
--- /dev/null
+++ b/docs/changelog.d/+tailscale-main-sha-rebuild.infra.md
@@ -0,0 +1 @@
+Update `tailscale-operator-ringtail` ProxyClass to reference the `0108b68` main-SHA build of the tailscale container. Routine post-merge cleanup so the deployed image traces to a commit that survives PR branch cleanup.