diff --git a/CHANGELOG.md b/CHANGELOG.md
index 34b8feb..b5a3920 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -6,6 +6,8 @@ Notable changes to ktms-admin. The format follows
 
 ## [Unreleased]
 
+## [1.1.2] - 2026-10-27
+
 ### Changed
 - Tested against KTMS 1.3.6 and light-tokenmeter 1.1.0 (`scripts/e2e.refs`); the `ktms.v1` copy
   follows KTMS 1.3.6, which adds `NodeRegistryService.PullNodeUsage` (unused by the console).
diff --git a/SECURITY.md b/SECURITY.md
index 875ed31..19a6e86 100644
--- a/SECURITY.md
+++ b/SECURITY.md
@@ -19,7 +19,7 @@ From 1.0.0 on, images are signed with keyless [Sigstore cosign](https://docs.sig
 SBOM and SLSA provenance. Use cosign 3 and pin the identity to the tag you verify:
 
 ```bash
-V=v1.1.1
+V=v1.1.2
 cosign verify coyl/ktms-admin:${V#v} \
   --certificate-identity "https://github.com/ai-process/ktms-admin/.github/workflows/docker-publish.yml@refs/tags/$V" \
   --certificate-oidc-issuer https://token.actions.githubusercontent.com