diff --git a/tinycloud-node-server/CHANGELOG.md b/tinycloud-node-server/CHANGELOG.md
index c9d0aacd..eff0c4f0 100644
--- a/tinycloud-node-server/CHANGELOG.md
+++ b/tinycloud-node-server/CHANGELOG.md
@@ -7,6 +7,12 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [1.25.9](https://github.com/TinyCloudLabs/tinycloud-node/compare/v0.0.1...v1.25.9) - 2026-10-28
+
+### Added
+
+- *(policy)* scope share decrypt to named key (TC-1777)
+
 - Recheck hook ticket delegation revocation when event streams open and use
   literal segment-prefix matching for hook subscriptions.