diff --git a/.release-please-manifest.json b/.release-please-manifest.json
index a915e8c..001eb2c 100644
--- a/.release-please-manifest.json
+++ b/.release-please-manifest.json
@@ -1,3 +1,3 @@
 {
-  ".": "0.1.1"
+  ".": "0.1.2"
 }
diff --git a/CHANGELOG.md b/CHANGELOG.md
index b93dbcb..ecb3673 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,5 +1,12 @@
 # Changelog
 
+## [0.1.2](https://github.com/agentnameservice/ans-openshell/compare/v0.1.1...v0.1.2) (2026-11-06)
+
+
+### Bug Fixes
+
+* **hydrator:** read sandbox identity from device.container ([#24](https://github.com/agentnameservice/ans-openshell/issues/24)) ([b9ac477](https://github.com/agentnameservice/ans-openshell/commit/b9ac477c0b78c339395b297deededa80b311a34a)), closes [#23](https://github.com/agentnameservice/ans-openshell/issues/23)
+
 ## [0.1.1](https://github.com/agentnameservice/ans-openshell/compare/v0.1.0...v0.1.1) (2026-11-05)
 
 
diff --git a/deploy/helm/ans-openshell/Chart.yaml b/deploy/helm/ans-openshell/Chart.yaml
index 38524ec..7f80d66 100644
--- a/deploy/helm/ans-openshell/Chart.yaml
+++ b/deploy/helm/ans-openshell/Chart.yaml
@@ -2,5 +2,5 @@ apiVersion: v2
 name: ans-openshell
 description: ANS identity, destination vetting and Trust Index feed for NVIDIA OpenShell
 type: application
-version: 0.1.1
-appVersion: 0.1.1
+version: 0.1.2
+appVersion: 0.1.2