diff --git a/BUILD.md b/BUILD.md
index 9a13e23..1c370fb 100644
--- a/BUILD.md
+++ b/BUILD.md
@@ -13,14 +13,14 @@ cloudron build \
   --set-build-service builder.docker.due.ren \
   --build-service-token e3265de06b1d0e7bb38400539012a8433a74c2c96a17955e \
   --set-repository andreasdueren/affine-cloudron \
-  --tag 0.25.23
+  --tag 0.25.5
 ```
 
 ## Deployment Steps
 1. Remove any previous dev install of AFFiNE on the Cloudron (always reinstall from scratch).
 2. Install the freshly built image:
    ```bash
-cloudron install --location affine.due.ren --image andreasdueren/affine-cloudron:0.25.23
+cloudron install --location affine.due.ren --image andreasdueren/affine-cloudron:0.25.5
    ```
 3. When prompted, confirm the app info and wait for Cloudron to report success (abort after ~30 seconds if installation stalls or errors to avoid hanging sessions).
 4. Visit `https://affine.due.ren` (or the chosen location) and sign in using Cloudron SSO.
diff --git a/CloudronManifest.json b/CloudronManifest.json
index d12d322..b53246c 100644
--- a/CloudronManifest.json
+++ b/CloudronManifest.json
@@ -5,13 +5,15 @@
   "description": "Next-gen knowledge base that blends docs, whiteboards, and databases for self-hosted teams.",
   "website": "https://affine.pro",
   "contactEmail": "support@affine.pro",
-  "version": "0.25.23-1",
-  "changelog": "Expose /admin as configure link for quicker dashboard access",
+  "version": "0.25.5",
+  "upstreamVersion": "0.25.5",
+  "changelog": "Update to AFFiNE 0.25.5 and keep dashboard configure link",
   "icon": "file://icon.png",
   "manifestVersion": 2,
   "minBoxVersion": "7.0.0",
   "httpPort": 3000,
   "configurePath": "/admin",
+  "optionalSso": true,
   "addons": {
     "localstorage": {},
     "postgresql": {},
diff --git a/Dockerfile b/Dockerfile
index c1bb9a1..629ddc0 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,4 +1,4 @@
-ARG AFFINE_VERSION=stable
+ARG AFFINE_VERSION=0.25.5
 FROM ghcr.io/toeverything/affine:${AFFINE_VERSION} AS upstream
 
 FROM cloudron/base:5.0.0