diff --git a/convox.yml b/convox.yml
index 69dc4b32..424e018e 100644
--- a/convox.yml
+++ b/convox.yml
@@ -30,7 +30,7 @@ services:
     # Pinned to an immutable release tag. scripts/bump-version.sh sets it to the new
     # version (:vX.Y.Z); the release workflow publishes that tag when the v* git tag is pushed.
     # :e327add is the v0.1.1 release (identical to :latest when this was pinned).
-    image: docker.io/docspringcom/rack-gateway:v0.1.10
+    image: docker.io/docspringcom/rack-gateway:v0.1.11
     command: ./scripts/start-gateway.sh
     environment:
       - PORT=8080
@@ -52,7 +52,7 @@ services:
 
   admin:
     # Uses same image as gateway service (kept in sync by scripts/bump-version.sh)
-    image: docker.io/docspringcom/rack-gateway:v0.1.10
+    image: docker.io/docspringcom/rack-gateway:v0.1.11
     command: echo "Use this service to run migrations, database admin tasks, etc."
     environment:
       - PORT=8080
diff --git a/docs/src/content/docs/operations/upgrades.mdx b/docs/src/content/docs/operations/upgrades.mdx
index 6a353fdc..011665e9 100644
--- a/docs/src/content/docs/operations/upgrades.mdx
+++ b/docs/src/content/docs/operations/upgrades.mdx
@@ -207,7 +207,7 @@ A restore to before the upgrade loses the audit events written since; see
 
 ## Release Notes That Need Action
 
-### Anchor bucket retention checked at startup
+### Anchor bucket retention checked at startup (v0.1.11)
 
 `AUDIT_ANCHOR_RETENTION_DAYS` is now checked: the gateway reads the anchor bucket's Object Lock configuration at
 startup and in every audit verification, and refuses to start (verification fails and alerts) unless the bucket's
diff --git a/web/package.json b/web/package.json
index 9bd67ade..37302f82 100644
--- a/web/package.json
+++ b/web/package.json
@@ -1,7 +1,7 @@
 {
   "name": "web",
   "private": true,
-  "version": "0.1.10",
+  "version": "0.1.11",
   "type": "module",
   "packageManager": "bun@1.4.2",
   "scripts": {