diff --git a/CHANGELOG.md b/CHANGELOG.md
index 5966a6f..e1dc805 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1629,3 +1629,17 @@
 * Set owner id to zero when GetRegistrationToken for repo (#31725) (#31729)
 * Fix API endpoint for registration-token (#31722) (#31728)
 * Add permission check when creating PR (#31033) (#31720)
+
+[1.33.3]
+* Update Gitea to 1.22.3
+* [Full changelog](https://github.com/go-gitea/gitea/releases/tag/v1.22.3)
+* Fix bug when a token is given public only (#32204) (#32218)
+* Increase cacheContextLifetime to reduce false reports (#32011) (#32023)
+* Don't join repository when loading action table data (#32127) (#32143)
+* Fix javascript error when an anonymous user visits migration page (#32144) (#32179)
+* Don't init signing keys if oauth2 provider is disabled (#32177)
+* Fix wrong status of Set up Job when first step is skipped (#32120) (#32125)
+* Fix bug when deleting a migrated branch (#32075) (#32123)
+* Truncate commit message during Discord webhook push events (#31970) (#32121)
+* Allow to set branch protection in an empty repository (#32095) (#32119)
+* Fix panic when cloning with wrong ssh format. (#32076) (#32118)
diff --git a/CloudronManifest.json b/CloudronManifest.json
index 8a9de9e..b9aa255 100644
--- a/CloudronManifest.json
+++ b/CloudronManifest.json
@@ -4,8 +4,8 @@
   "author": "Gitea developers",
   "description": "file://DESCRIPTION.md",
   "tagline": "A painless self-hosted Git Service",
-  "version": "1.33.2",
-  "upstreamVersion": "1.22.2",
+  "version": "1.33.3",
+  "upstreamVersion": "1.22.3",
   "healthCheckPath": "/explore",
   "httpPort": 3000,
   "memoryLimit": 536870912,