diff --git a/.claude-plugin/plugin.json b/.claude-plugin/plugin.json
index 47c925055..cd285e712 100644
--- a/.claude-plugin/plugin.json
+++ b/.claude-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "webcmd",
-  "version": "0.8.4",
+  "version": "0.8.5",
   "description": "Self-learning browser infrastructure for AI agents: live browser control plus local sitemap memory that makes repeat runs faster and cheaper.",
   "author": {
     "name": "AgentRHQ",
diff --git a/.codex-plugin/plugin.json b/.codex-plugin/plugin.json
index 23250cf84..d44f0e9c5 100644
--- a/.codex-plugin/plugin.json
+++ b/.codex-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "webcmd",
-  "version": "0.8.4",
+  "version": "0.8.5",
   "description": "Self-learning browser infrastructure for AI agents: live browser control plus local sitemap memory that makes repeat runs faster and cheaper.",
   "author": {
     "name": "AgentRHQ",
diff --git a/.release-please-manifest.json b/.release-please-manifest.json
index 147dffd7b..f87cb8f12 100644
--- a/.release-please-manifest.json
+++ b/.release-please-manifest.json
@@ -1,3 +1,3 @@
 {
-    ".": "0.8.4"
+    ".": "0.8.5"
 }
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 02c844607..54b795e1e 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -18,6 +18,13 @@
 - Hosted command lists retain excluded commands as `LOCAL` rows and return a local-only error instead of plugin-install guidance.
 - Local auth commands initialize user CLI compatibility shims, and hosted auth uses the same native grammar, flags, choices, and help as local mode.
 
+## [0.8.5](https://github.com/agentrhq/webcmd/compare/webcmd-v0.8.4...webcmd-v0.8.5) (2026-09-11)
+
+
+### Bug Fixes
+
+* bump js-yaml to 4.3.2 for GHSA-2883-xcg3-v3hh ([b72bf28](https://github.com/agentrhq/webcmd/commit/b72bf2862c4e35c813a44d4dbf9a12d77801cd24))
+
 ## [0.8.4](https://github.com/agentrhq/webcmd/compare/webcmd-v0.8.3...webcmd-v0.8.4) (2026-09-08)
 
 ### Improvements
diff --git a/package-lock.json b/package-lock.json
index 6263deb9c..8a6f73a4e 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -1,12 +1,12 @@
 {
   "name": "@agentrhq/webcmd",
-  "version": "0.8.4",
+  "version": "0.8.5",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@agentrhq/webcmd",
-      "version": "0.8.4",
+      "version": "0.8.5",
       "hasInstallScript": true,
       "license": "Apache-2.0",
       "dependencies": {
diff --git a/package.json b/package.json
index 8e157c60f..11bfc89a4 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@agentrhq/webcmd",
-  "version": "0.8.4",
+  "version": "0.8.5",
   "description": "Turn websites, browser sessions, desktop apps, and local tools into deterministic CLI surfaces for humans and AI agents.",
   "engines": {
     "node": ">=20.6.0"