diff --git a/CHANGELOG.md b/CHANGELOG.md
index 88eea0b..8b6a5fc 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,5 +1,18 @@
 # changelog
 
+## 0.4.5
+
+- **fix**: the default `User-Agent` reads its version from `build.zig.zon` instead of a string
+  literal. the literal was written for 0.3.30 and never followed later bumps, so every
+  release since has introduced itself as 0.3.30 to the PDSes it called. `build.zig` now
+  exposes the zon version through a `build_options` module that consumers inherit with the
+  `zat` module.
+- **fix**: `HttpTransport.fetch` returns `error.TooManyHeaders` when `accept` plus
+  `extra_headers` exceed its 8-slot buffer. it used to keep the first eight and drop the rest
+  without a word, which would have surfaced as an unrelated auth failure.
+- **test**: the did:plc integration test runs on `testing.allocator` directly and its
+  duplicate leak-repro twin is gone.
+
 ## 0.4.4
 
 - **fix**: zat compiles for 32-bit targets without native 64-bit atomics (ARMv6, e.g. a
diff --git a/build.zig.zon b/build.zig.zon
index 218e577..dad7b0f 100644
--- a/build.zig.zon
+++ b/build.zig.zon
@@ -1,6 +1,6 @@
 .{
     .name = .zat,
-    .version = "0.4.4",
+    .version = "0.4.5",
     .fingerprint = 0x8da9db57ee82fbe4,
     .minimum_zig_version = "0.16.0-dev.3070+b22eb176b",
     .dependencies = .{