diff --git a/CHANGELOG.md b/CHANGELOG.md
index 46791fc9..c051ac05 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,5 +1,15 @@
 # Changelog
 
+## v1.4.474 (2026-09-02)
+
+### PR [#2206](https://github.com/danielmiessler/Fabric/pull/2206) by [ksylvan](https://github.com/ksylvan): fix: confine storage names and authenticate Ollama serve
+
+- Reject unsafe cross-platform storage names and directory traversal attempts.
+- Confine symlink targets to configured filesystem storage directories.
+- Require API keys for non-loopback server bindings and authenticate Ollama routes.
+- Validate chat pattern, context, and session names early while preventing internal filesystem details from leaking through client errors.
+- Default the REST server to loopback port 8080 and add regression coverage for traversal, symlink, and authentication security.
+
 ## v1.4.473 (2026-08-29)
 
 ### PR [#2203](https://github.com/danielmiessler/Fabric/pull/2203) by [pacocartones](https://github.com/pacocartones) and [ksylvan](https://github.com/ksylvan): fix(web): preserve multi-byte UTF-8 split across SSE chunks in chat stream
diff --git a/cmd/fabric/version.go b/cmd/fabric/version.go
index 03b26cc2..bd611b26 100644
--- a/cmd/fabric/version.go
+++ b/cmd/fabric/version.go
@@ -1,3 +1,3 @@
 package main
 
-var version = "v1.4.473"
+var version = "v1.4.474"
diff --git a/cmd/generate_changelog/changelog.db b/cmd/generate_changelog/changelog.db
index 9f6ef53f..a35fc7be 100644
Binary files a/cmd/generate_changelog/changelog.db and b/cmd/generate_changelog/changelog.db differ
diff --git a/cmd/generate_changelog/incoming/2206.txt b/cmd/generate_changelog/incoming/2206.txt
deleted file mode 100644
index 536520ad..00000000
--- a/cmd/generate_changelog/incoming/2206.txt
+++ /dev/null
@@ -1,7 +0,0 @@
-### PR [#2206](https://github.com/danielmiessler/Fabric/pull/2206) by [ksylvan](https://github.com/ksylvan): fix: confine storage names and authenticate Ollama serve
-
-- Reject unsafe cross-platform storage names and directory traversal attempts.
-- Confine symlink targets to configured filesystem storage directories.
-- Require API keys for non-loopback server bindings and authenticate Ollama routes.
-- Validate chat pattern, context, and session names early while preventing internal filesystem details from leaking through client errors.
-- Default the REST server to loopback port 8080 and add regression coverage for traversal, symlink, and authentication security.
diff --git a/nix/pkgs/fabric/version.nix b/nix/pkgs/fabric/version.nix
index 0c7d3356..3296735f 100644
--- a/nix/pkgs/fabric/version.nix
+++ b/nix/pkgs/fabric/version.nix
@@ -1 +1 @@
-"1.4.473"
+"1.4.474"