diff --git a/README.md b/README.md
index 91e16ba..2269467 100644
--- a/README.md
+++ b/README.md
@@ -123,6 +123,7 @@ Per-release detail lives on the [changelog](https://markamd.vercel.app/changelog
 - [x] v1.7.1 workflow: quick file previews, app-wide zoom, and faster folder watching
 - [x] [v1.7.2 patch](docs/release-notes/v1.7.2.md): public updater downloads, active-file reload reliability, and Linux Wayland AppImage startup
 - [x] [v1.7.6 patch](docs/release-notes/v1.7.6.md): manual explorer refresh and Tauri 2.12
+- [x] [v1.7.7 patch](docs/release-notes/v1.7.7.md): TLS security update for the updater and public updater download links
 - [ ] next: native/silent PDF generation
 - [ ] next: context handoff presets for bring-your-own-ai workflows, starting with markdown and XML-tag bundle formats
 
diff --git a/docs/release-notes/v1.7.7.md b/docs/release-notes/v1.7.7.md
new file mode 100644
index 0000000..aa88bd3
--- /dev/null
+++ b/docs/release-notes/v1.7.7.md
@@ -0,0 +1,13 @@
+# v1.7.7
+
+v1.7.7 is a small maintenance release with a TLS security update and a fix to the published updater manifest.
+
+## fixed
+
+- Updated rustls to 0.23.45 to pick up a fix for TLS 1.3 handshake handling in the updater's network stack.
+- Published the updater manifest with public GitHub release download links.
+
+## notes
+
+- No app behavior changes from v1.7.6.
+- Signed updater artifacts remain enabled.
diff --git a/package.json b/package.json
index 2d92dc5..eaa0e81 100644
--- a/package.json
+++ b/package.json
@@ -1,7 +1,7 @@
 {
   "name": "marka-md",
   "private": true,
-  "version": "1.7.6",
+  "version": "1.7.7",
   "type": "module",
   "scripts": {
     "dev": "vite",
diff --git a/src-tauri/Cargo.lock b/src-tauri/Cargo.lock
index 7788e09..ef0df6c 100644
--- a/src-tauri/Cargo.lock
+++ b/src-tauri/Cargo.lock
@@ -2111,7 +2111,7 @@ checksum = "5e5032e24019045c762d3c0f28f5b6b8bbf38563a65908389bf7978758920897"
 
 [[package]]
 name = "marka"
-version = "1.7.6"
+version = "1.7.7"
 dependencies = [
  "serde",
  "serde_json",
diff --git a/src-tauri/Cargo.toml b/src-tauri/Cargo.toml
index 0443f46..42eefa1 100644
--- a/src-tauri/Cargo.toml
+++ b/src-tauri/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "marka"
-version = "1.7.6"
+version = "1.7.7"
 description = "marka.md — a local markdown editor for the notes you share with ai"
 authors = ["Matt Enarle"]
 edition = "2021"
diff --git a/src-tauri/tauri.conf.json b/src-tauri/tauri.conf.json
index 5aac63d..346e7ba 100644
--- a/src-tauri/tauri.conf.json
+++ b/src-tauri/tauri.conf.json
@@ -2,7 +2,7 @@
   "$schema": "https://schema.tauri.app/config/2",
   "productName": "marka.md",
   "mainBinaryName": "marka.md",
-  "version": "1.7.6",
+  "version": "1.7.7",
   "identifier": "com.mattenarle.markamd",
   "build": {
     "beforeDevCommand": "bun run dev",