diff --git a/CHANGELOG.md b/CHANGELOG.md
index 1560717a53..4cabf79b51 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -7,6 +7,30 @@ file is the human-readable summary of what changed and why.
 
 ## Unreleased
 
+## 1.17.18-1 — 2026-07-14
+
+### Provider setup
+
+- **In-app provider setup** — a first-run setup dialog (also reachable anytime
+  via `/configure`, or `codev configure` from the shell) configures a provider
+  without the hub, offering three paths. **Login with SSO** runs a PKCE flow
+  against the CoDev SSO wrapper (browser handoff plus manual paste-back for
+  headless machines, silent refresh on re-runs); the backend then mints the
+  gateway key and supplies the gateway URL, you pick a default model from the
+  gateway's model list, and the hub-shaped `provider.aigateway` block is written
+  to the global `codev.json` while the session and key land in the hub-shared
+  `~/.codev/auth.json`, so a hub installed later reuses them. **Custom provider**
+  takes a provider id and API key, then an optional OpenAI-compatible base URL:
+  with one, the available models are discovered from `/v1/models` and a keyless
+  `provider.<id>` block is written to `codev.json` (the key stays in
+  `~/.codev/auth.json`, merged in by id); with none, only the credential is
+  stored. **Connect provider** opens the built-in provider dialog for Anthropic,
+  OpenAI, and 75+ others. The same Custom-provider flow also backs that dialog's
+  "Other" entry.
+  ([#29](https://github.com/quickbeard/codev-code/pull/29),
+  [#75](https://github.com/quickbeard/codev-code/pull/75),
+  [#76](https://github.com/quickbeard/codev-code/pull/76))
+
 ### Session screen
 
 - **Scrollback-style layout** — the codev logo + tip render top-left as the