diff --git a/CHANGELOG b/CHANGELOG
index 5221b45..bb68f4b 100644
--- a/CHANGELOG
+++ b/CHANGELOG
@@ -622,3 +622,15 @@
 * Explicitly close ijson coroutines once we are done with them, instead of leaving the garbage collector to close them. (#12875)
 * Improve URL previews by not including the content of media tags in the generated description. (#12887)
 
+[1.45.0]
+* Update Synapse to 1.61.0
+* [Full changelog](https://github.com/matrix-org/synapse/releases/tag/v1.61.0)
+* Add new media_retention options to the homeserver config for routinely cleaning up non-recently accessed media. (#12732, #12972, #12977)
+* Experimental support for MSC3772: Push rule for mutually related events. (#12740, #12859)
+* Update to the check_event_for_spam module callback: Deprecate the current callback signature, replace it with a new signature that is both less ambiguous (replacing booleans with explicit allow/block) and more powerful (ability to return explicit error codes). (#12808)
+* Add storage and module API methods to get monthly active users (and their corresponding appservices) within an optionally specified time range. (#12838, #12917)
+* Support the new error code ORG.MATRIX.MSC3823.USER_ACCOUNT_SUSPENDED from MSC3823. (#12845, #12923)
+* Add a configurable background job to delete stale devices. (#12855)
+* Improve URL previews for pages with empty elements. (#12951)
+* Allow updating a user's password using the admin API without logging out their devices. Contributed by @jcgruenhage. (#12952)
+
diff --git a/CloudronManifest.json b/CloudronManifest.json
index a17cada..9b558fe 100644
--- a/CloudronManifest.json
+++ b/CloudronManifest.json
@@ -5,8 +5,8 @@
   "description": "file://DESCRIPTION.md",
   "changelog": "file://CHANGELOG",
   "tagline": "Secure & decentralized communication",
-  "version": "1.44.0",
-  "upstreamVersion": "1.60.0",
+  "version": "1.45.0",
+  "upstreamVersion": "1.61.0",
   "healthCheckPath": "/",
   "httpPort": 8008,
   "memoryLimit": 536870912,