From a07ad108c249109311536fd4c11fb1c0cd2e8d1d Mon Sep 17 00:00:00 2001
From: dryrun <dryrun@example.invalid>
Date: Mon, 19 Oct 2026 14:45:44 +0000
Subject: [PATCH] chore(release): 1.21.2

---
 CHANGELOG.md                     | 11 +++++++++++
 Cargo.lock                       |  2 +-
 test/m1-realdata-e2e/Cargo.lock  |  2 +-
 tinycloud-node-server/Cargo.toml |  2 +-
 4 files changed, 14 insertions(+), 3 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 74d4a7ad..501c29ca 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -2,6 +2,17 @@
 
 ## [Unreleased]
 
+## [1.21.2] - 2026-10-19
+
+### Release notes
+
+- Revocation authorization tightened (TC-1436, #353); revoke controls carry a typed scope (TC-1423, #356); owner exact-CID revoke grants and canonical CID targets (TC-821, #357).
+- Node CLI dispatch re-wired; unknown arguments now exit 2 (TC-1442, #355).
+- `serve` resolves provider and Auto node identities again; Auto and provider refuse to create an identity where a TEE is indicated (TC-1442, #359).
+- Docs: CLAUDE.md logging carve-out for the node's own DID (TC-961, #365).
+- No database migrations.
+- Rollback is the 1.21.1 image.
+
 ### Changes
 
 - `POST /revoke` authorizes the delegation's issuer, the owner of a space its abilities target, or the holder of a revoke control grant issued by one of them. The delegatee alone is no longer an authorized revoker, directly or through a control grant it issued; an intermediate delegator still revokes the delegations it issued. Delegation status visibility is unchanged (TC-1436).
diff --git a/Cargo.lock b/Cargo.lock
index 6e9245cb..8bea3ae1 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -9677,7 +9677,7 @@ dependencies = [
 
 [[package]]
 name = "tinycloud-node"
-version = "1.21.1"
+version = "1.21.2"
 dependencies = [
  "aes-gcm",
  "anyhow",
diff --git a/test/m1-realdata-e2e/Cargo.lock b/test/m1-realdata-e2e/Cargo.lock
index 66d8941a..15880a2c 100644
--- a/test/m1-realdata-e2e/Cargo.lock
+++ b/test/m1-realdata-e2e/Cargo.lock
@@ -7771,7 +7771,7 @@ dependencies = [
 
 [[package]]
 name = "tinycloud-node"
-version = "1.21.1"
+version = "1.21.2"
 dependencies = [
  "aes-gcm",
  "anyhow",
diff --git a/tinycloud-node-server/Cargo.toml b/tinycloud-node-server/Cargo.toml
index 1d24917e..d037e02e 100644
--- a/tinycloud-node-server/Cargo.toml
+++ b/tinycloud-node-server/Cargo.toml
@@ -1,7 +1,7 @@
 [package]
 name = "tinycloud-node"
 build = "build.rs"
-version = "1.21.1"
+version = "1.21.2"
 authors = ["TinyCloud Protocol"]
 edition = "2021"
 description = "TinyCloud Protocol Node"