diff --git a/CHANGELOG b/CHANGELOG
index 060ce8c..5a16a5c 100644
--- a/CHANGELOG
+++ b/CHANGELOG
@@ -471,3 +471,11 @@
 * Fix processing of remote ActivityPub actors making use of Link objects as Image url (ClearlyClaire)
 * Fix link verifications when page size exceeds 1MB (ClearlyClaire)
 
+[1.13.2]
+* Update Mastodon to 4.2.9
+* [Full changelog](https://github.com/mastodon/mastodon/releases/tag/v4.2.9)
+* Update dependencies
+* Fix private mention filtering (GHSA-5fq7-3p3j-9vrf)
+* Fix password change endpoint not being rate-limited (GHSA-q3rg-xx5v-4mxh)
+* Add hardening around rate-limit bypass (GHSA-c2r5-cfqr-c553)
+
diff --git a/CloudronManifest.json b/CloudronManifest.json
index 085cf87..c00a3ec 100644
--- a/CloudronManifest.json
+++ b/CloudronManifest.json
@@ -5,8 +5,8 @@
   "description": "file://DESCRIPTION.md",
   "changelog": "file://CHANGELOG",
   "tagline": "Federated social network",
-  "version": "1.13.1",
-  "upstreamVersion": "4.2.8",
+  "version": "1.13.2",
+  "upstreamVersion": "4.2.9",
   "healthCheckPath": "/about",
   "httpPort": 8000,
   "memoryLimit": 1610612736,