diff --git a/CHANGELOG.md b/CHANGELOG.md
index 4685f5c..74fe9e1 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -5,6 +5,8 @@ Format follows [Keep a Changelog](https://keepachangelog.com/en/1.1.0/); version
 
 ## [Unreleased]
 
+## [2.3.0] - 2026-10-12
+
 ### Added
 
 - **Schema for notifications** (migration `0004_notifications.sql`, DDL only):
diff --git a/README.md b/README.md
index aeba469..9da6600 100644
--- a/README.md
+++ b/README.md
@@ -112,7 +112,7 @@ docker run --rm -d --name selfpost-try \
   -e SELFPOST_HOSTNAME=mail.local.test \
   -e PANEL_COOKIE_SECURE=false \
   -v selfpost-try-data:/data \
-  ghcr.io/mixeme/selfpost:2.2.0
+  ghcr.io/mixeme/selfpost:2.3.0
 ```
 
 **Get the setup URL** (pick one):
diff --git a/deploy/docker-compose.yml b/deploy/docker-compose.yml
index 86c8911..9d64230 100644
--- a/deploy/docker-compose.yml
+++ b/deploy/docker-compose.yml
@@ -21,7 +21,7 @@
 
 services:
   selfpost:
-    image: ghcr.io/mixeme/selfpost:2.2.0
+    image: ghcr.io/mixeme/selfpost:2.3.0
     restart: unless-stopped
     environment:
       SELFPOST_HOSTNAME: "${SELFPOST_HOSTNAME:?set the mail/panel hostname, e.g. mail.example.com}"
diff --git a/docs/development.md b/docs/development.md
index 0f17eb3..7e34230 100644
--- a/docs/development.md
+++ b/docs/development.md
@@ -107,7 +107,7 @@ than the default «meaningful step» rule in [§ Commits and release build](#com
 2. Git tag `vX.Y.Z` and publish the GitHub Release only on explicit request (see
    [§ Release image](#release-image)).
 
-**Planned version cuts** (from pin `2.2.0`; adjust if semver changes mid-track):
+**Planned version cuts** (from pin `2.3.0`; adjust if semver changes mid-track):
 
 | Stage | ID | Cut |
 |---|---|---|
diff --git a/docs/guide.md b/docs/guide.md
index 928b063..619ca64 100644
--- a/docs/guide.md
+++ b/docs/guide.md
@@ -184,7 +184,7 @@ cat ./data/setup-token
 #### Fixed image tag
 
 `deploy/docker-compose.yml` pins an explicit version (`ghcr.io/mixeme/selfpost:X.Y.Z`),
-deliberately never `:latest`. The current pin is `2.2.0`. Intermediate
+deliberately never `:latest`. The current pin is `2.3.0`. Intermediate
 CHANGELOG sections (`0.2.0`…`0.6.0`) record development cuts from before that
 image was published. Pinning matters because of the backup version check (see
 [Full backup and restore](#full-backup-and-restore)): the panel binary's
diff --git a/docs/plans/panel-notifications.md b/docs/plans/panel-notifications.md
index 93d7969..97e0b1c 100644
--- a/docs/plans/panel-notifications.md
+++ b/docs/plans/panel-notifications.md
@@ -1,6 +1,6 @@
 # Plan: panel-notifications
 
-**Status:** agreed 2026-10-12 - the design questions were closed with the owner and he took it into work ("Делаем")  
+**Status:** shipped in `2.3.0` (2026-10-12); agreed the same day - the design questions were closed with the owner and he took it into work ("Делаем")  
 **Date:** 2026-10-12  
 **Version:** `2.3.0` MINOR (one migration; opt-out by a switch).
 
diff --git a/docs/roadmap.md b/docs/roadmap.md
index 616f4a4..23a327c 100644
--- a/docs/roadmap.md
+++ b/docs/roadmap.md
@@ -35,7 +35,7 @@ in `git log` and [CHANGELOG.md](../CHANGELOG.md).
 | template-data-typing | Typed structs for template data instead of `map[string]any` | candidate | — | — |
 | structured-logging | `log/slog` with levels and fields | candidate | — | — |
 | review-2026-08-followups | Remaining findings of the 2026-08-19 code review | candidate | — | — |
-| panel-notifications | E-mail notifications about important events | in progress | 10/10 | [plans/panel-notifications.md](plans/panel-notifications.md) |
+| panel-notifications | E-mail notifications about important events | shipped `2.3.0` | 10/10 | [plans/panel-notifications.md](plans/panel-notifications.md) |
 | delivery-log-storage | Keep a message's `mail.log` lines with its send-log row | shipped `2.2.0` | 8/8 | [plans/delivery-log-storage.md](plans/delivery-log-storage.md) |
 | password-reset | Password reset by e-mail | candidate | — | — |
 | phone-desktop-mode | A phone browser in "desktop site" mode gets the phone navigation | candidate | — | — |
@@ -47,8 +47,8 @@ in `git log` and [CHANGELOG.md](../CHANGELOG.md).
 development convenience): **panel-redesign** shipped as `2.0.0` (2026-10-11) and
 **inbound-antispam-panel** as `2.1.0` (2026-10-12), built in the new component
 kit — styling its two screens once instead of twice. **delivery-log-storage**
-shipped as `2.2.0` the same day. Agreed after it: **panel-notifications**
-(`2.3.0`); every other remaining
+shipped as `2.2.0` the same day, and **panel-notifications** as `2.3.0`.
+Nothing is agreed after it: every remaining
 item is a candidate. panel-docs shipped in
 [CHANGELOG.md](../CHANGELOG.md) `[1.8.0]`; dmarc-reports in `[1.7.0]`
 (its ingest path first ran in `2.0.0` and was reviewed on 2026-10-11, see
@@ -365,7 +365,7 @@ restarts so a reboot does not re-announce everything. The screens are not
 drawn: the Notifications box was taken out of `account` and `settings` on
 2026-10-10 and is redrawn as the first step.
 
-**Version:** `2.3.0` MINOR; agreed 2026-10-12 - the design questions were closed
+**Version:** shipped `2.3.0` (2026-10-12), MINOR - the design questions were closed
 with the owner on 2026-10-12
 ([plans/panel-notifications.md](plans/panel-notifications.md)) and he took it into
 work the same day.