diff --git a/.planning/todos/pending/2026-10-22-user-logout-cookie-stays-valid.md b/.planning/todos/pending/2026-10-22-user-logout-cookie-stays-valid.md
index a64a0629..ce44c329 100644
--- a/.planning/todos/pending/2026-10-22-user-logout-cookie-stays-valid.md
+++ b/.planning/todos/pending/2026-10-22-user-logout-cookie-stays-valid.md
@@ -48,3 +48,8 @@ Confirmed and fixed locally; closes when released. Debug session:
 - Ships in sm-user-plugin v0.1.8 (with `aa83969`, needs SummerCMS v0.4.3) and the sm-demo-app
   pointer bumps. Hand check after deploy: cookie-only logout, then a `jwt.auth` route with the old
   cookie answers 401.
+
+Released 2026-10-22: sm-user-plugin v0.1.8 (930b158, with SummerCMS v0.4.3); pointers bumped and
+pushed in sm-demo-app (e587980, vue-demo-app 8f8e70d), sm-bm-app, sm-grzybyfunkcjonalne-app and
+sm-summercmsio-app; fonoteka.go not bumped (34 unpushed commits from another session). Remaining:
+deploy, then the hand check above; close the todo and the debug session after it.