diff --git a/CHANGELOG.md b/CHANGELOG.md
index 1297d90..b6c60e5 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -12,6 +12,23 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/).
 
 <!-- towncrier release notes start -->
 
+## [v1.5.2] - 2026-02-09
+
+### Features
+
+- Filter blumeops-tasks to only show dated/recurring tasks when due today or earlier.
+- Add `docs-review` mise task that sorts docs by `last-reviewed` frontmatter date, prioritizing never-reviewed cards. Updated the review-documentation how-to to match.
+
+### Bug Fixes
+
+- Fix fly-deploy WARNING by starting nginx before Tailscale, deferring upstream DNS resolution to request time.
+
+### Infrastructure
+
+- Migrate all Ansible `op item get` calls to `op read` URI syntax for cleaner output and remove the `regex_replace` workaround on the Fly deploy token.
+- Restrict fly.io proxy ACLs to dedicated `tag:flyio-target` endpoints instead of broad `tag:k8s` and `tag:homelab` grants. Migrate all Tailscale Ingresses to a shared ProxyGroup with per-Ingress tag overrides (`tag:flyio-target` on docs, loki, prometheus). Add `autoApprovers` for VIP service routes. Enable `--accept-routes` on indri for ProxyGroup VIP routing.
+
+
 ## [v1.5.1] - 2026-02-08
 
 ### Features
diff --git a/argocd/manifests/docs/deployment.yaml b/argocd/manifests/docs/deployment.yaml
index 61553ee..f257687 100644
--- a/argocd/manifests/docs/deployment.yaml
+++ b/argocd/manifests/docs/deployment.yaml
@@ -22,7 +22,7 @@ spec:
               name: http
           env:
             - name: DOCS_RELEASE_URL
-              value: "https://forge.ops.eblu.me/eblume/blumeops/releases/download/v1.5.1/docs-v1.5.1.tar.gz"
+              value: "https://forge.ops.eblu.me/eblume/blumeops/releases/download/v1.5.2/docs-v1.5.2.tar.gz"
           resources:
             requests:
               memory: "64Mi"
diff --git a/docs/changelog.d/feature-blumeops-tasks-due-date-filter.feature.md b/docs/changelog.d/feature-blumeops-tasks-due-date-filter.feature.md
deleted file mode 100644
index 30d2f1d..0000000
--- a/docs/changelog.d/feature-blumeops-tasks-due-date-filter.feature.md
+++ /dev/null
@@ -1 +0,0 @@
-Filter blumeops-tasks to only show dated/recurring tasks when due today or earlier.
diff --git a/docs/changelog.d/feature-docs-review-last-reviewed.feature.md b/docs/changelog.d/feature-docs-review-last-reviewed.feature.md
deleted file mode 100644
index 66823ed..0000000
--- a/docs/changelog.d/feature-docs-review-last-reviewed.feature.md
+++ /dev/null
@@ -1 +0,0 @@
-Add `docs-review` mise task that sorts docs by `last-reviewed` frontmatter date, prioritizing never-reviewed cards. Updated the review-documentation how-to to match.
diff --git a/docs/changelog.d/fix-fly-deploy-warnings.bugfix.md b/docs/changelog.d/fix-fly-deploy-warnings.bugfix.md
deleted file mode 100644
index ec44db2..0000000
--- a/docs/changelog.d/fix-fly-deploy-warnings.bugfix.md
+++ /dev/null
@@ -1 +0,0 @@
-Fix fly-deploy WARNING by starting nginx before Tailscale, deferring upstream DNS resolution to request time.
diff --git a/docs/changelog.d/op-read-migration.infra.md b/docs/changelog.d/op-read-migration.infra.md
deleted file mode 100644
index ef52282..0000000
--- a/docs/changelog.d/op-read-migration.infra.md
+++ /dev/null
@@ -1 +0,0 @@
-Migrate all Ansible `op item get` calls to `op read` URI syntax for cleaner output and remove the `regex_replace` workaround on the Fly deploy token.
diff --git a/docs/changelog.d/restrict-flyio-proxy-acl.infra.md b/docs/changelog.d/restrict-flyio-proxy-acl.infra.md
deleted file mode 100644
index f12f7f4..0000000
--- a/docs/changelog.d/restrict-flyio-proxy-acl.infra.md
+++ /dev/null
@@ -1 +0,0 @@
-Restrict fly.io proxy ACLs to dedicated `tag:flyio-target` endpoints instead of broad `tag:k8s` and `tag:homelab` grants. Migrate all Tailscale Ingresses to a shared ProxyGroup with per-Ingress tag overrides (`tag:flyio-target` on docs, loki, prometheus). Add `autoApprovers` for VIP service routes. Enable `--accept-routes` on indri for ProxyGroup VIP routing.