diff --git a/CHANGELOG.md b/CHANGELOG.md
index ed3e74a..06a40f9 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -9,6 +9,14 @@ one of them changed. An entry says which artefact and which version, so `web 0.1
 Every version published to a channel appears here. Nothing is written from memory afterwards: a build
 cannot be published without its entry.
 
+## 2026-10-26 — The script library, reviewed, still hidden `api 2.1.7` `web 2.1.11`
+
+**Nothing changes on screen.** These builds correct what a review of the unfinished script library
+found, and the library stays hidden until it is finished. The database and the configuration do not
+change.
+
+Update the web image first, or both images at once. No agent update is required.
+
 ## 2026-10-26 — The script library can run, still hidden `api 2.1.6` `web 2.1.10`
 
 **Nothing changes on screen.** The script library gains what runs a script on many machines and shows