diff --git a/.release-please-manifest.json b/.release-please-manifest.json
index 3613d3d8..0ee29079 100644
--- a/.release-please-manifest.json
+++ b/.release-please-manifest.json
@@ -1,4 +1,4 @@
 {
-  "web": "1.11.0",
-  "cli": "1.11.0"
+  "web": "1.12.0",
+  "cli": "1.12.0"
 }
diff --git a/cli/CHANGELOG.md b/cli/CHANGELOG.md
index b9f354de..269f9807 100644
--- a/cli/CHANGELOG.md
+++ b/cli/CHANGELOG.md
@@ -17,6 +17,16 @@ publish the extensions (see `.github/workflows/cli-release.yaml`). You no longer
 tag by hand; write Conventional Commit messages and release-please compiles the
 notes.
 
+## [1.12.0](https://github.com/foundation50/classroom50/compare/cli-v1.11.0...cli-v1.12.0) (2026-07-21)
+
+
+### Features
+
+* add Head TA (HTA) role ([#344](https://github.com/foundation50/classroom50/issues/344)) ([b6a7deb](https://github.com/foundation50/classroom50/commit/b6a7debaba1f829759f546690fc0600ff50e47f1))
+* **ci:** add release-please automation for cli releases ([#341](https://github.com/foundation50/classroom50/issues/341)) ([b5a3b94](https://github.com/foundation50/classroom50/commit/b5a3b944da0e8746be50d95f21d77feeee11db1b)), closes [#143](https://github.com/foundation50/classroom50/issues/143)
+* enforce a $0 Actions budget cap as org policy ([#356](https://github.com/foundation50/classroom50/issues/356)) ([3cb60e4](https://github.com/foundation50/classroom50/commit/3cb60e4653cf14b80cd3c46961b9f271a4562235))
+* **web:** capability-gate RBAC so TAs/Head TAs can't invoke owner-only or write ops ([#346](https://github.com/foundation50/classroom50/issues/346)) ([4335378](https://github.com/foundation50/classroom50/commit/433537843d3f78f441b74e7eedbf9fdd8df6fcca))
+
 ## 1.11.0
 
 Automated releases start here. CLI versions through `cli-v1.11.0` were cut by
diff --git a/web/CHANGELOG.md b/web/CHANGELOG.md
index b8536546..a6121e3e 100644
--- a/web/CHANGELOG.md
+++ b/web/CHANGELOG.md
@@ -17,6 +17,26 @@ classroom50.org (see `.github/workflows/web-release-please.yaml`). You no longer
 edit this file or tag by hand; write Conventional Commit messages and
 release-please compiles the notes.
 
+## [1.12.0](https://github.com/foundation50/classroom50/compare/web-v1.11.0...web-v1.12.0) (2026-07-21)
+
+
+### Features
+
+* add Head TA (HTA) role ([#344](https://github.com/foundation50/classroom50/issues/344)) ([b6a7deb](https://github.com/foundation50/classroom50/commit/b6a7debaba1f829759f546690fc0600ff50e47f1))
+* enforce a $0 Actions budget cap as org policy ([#356](https://github.com/foundation50/classroom50/issues/356)) ([3cb60e4](https://github.com/foundation50/classroom50/commit/3cb60e4653cf14b80cd3c46961b9f271a4562235))
+* **web:** add RTL language support (Arabic, Hebrew, Farsi, Urdu) ([#340](https://github.com/foundation50/classroom50/issues/340)) ([5e36401](https://github.com/foundation50/classroom50/commit/5e36401705b709a8c595825c756e658d203d1034))
+* **web:** capability-gate RBAC so TAs/Head TAs can't invoke owner-only or write ops ([#346](https://github.com/foundation50/classroom50/issues/346)) ([4335378](https://github.com/foundation50/classroom50/commit/433537843d3f78f441b74e7eedbf9fdd8df6fcca))
+* **web:** centralize classroom resource reconcile on owner open ([#349](https://github.com/foundation50/classroom50/issues/349)) ([c795216](https://github.com/foundation50/classroom50/commit/c7952160e7b7d425f445f6c6fd4ef3e0f1ee2a4b))
+* **web:** show live submission presence in teacher gradebook ([#354](https://github.com/foundation50/classroom50/issues/354)) ([a7a8465](https://github.com/foundation50/classroom50/commit/a7a8465def2a835147b2395e35dcf1571007c48f))
+
+
+### Bug Fixes
+
+* **web:** guide teachers past missing and Free-plan orgs in setup modal ([#355](https://github.com/foundation50/classroom50/issues/355)) ([4018f4b](https://github.com/foundation50/classroom50/commit/4018f4bc4767751cf4b8b67f0b0de2903a8b0ca0))
+* **web:** let CLDR fixed-count plural forms drop the count placeholder in verify_locale ([#345](https://github.com/foundation50/classroom50/issues/345)) ([99d8c76](https://github.com/foundation50/classroom50/commit/99d8c76dd6009a27b84c987c16535299b7ae96cc))
+* **web:** patch brace-expansion DoS (GHSA-3jxr-9vmj-r5cp) ([#357](https://github.com/foundation50/classroom50/issues/357)) ([ab4c306](https://github.com/foundation50/classroom50/commit/ab4c3060dc217904ea87ccbff485a959840fc212))
+* **web:** refresh staff list after add and guard teacher self-removal ([#350](https://github.com/foundation50/classroom50/issues/350)) ([e3a7b9a](https://github.com/foundation50/classroom50/commit/e3a7b9aed7bf9d201831937c740e6c0a8053f18e))
+
 ## [1.11.0](https://github.com/foundation50/classroom50/compare/web-v1.10.0...web-v1.11.0) (2026-07-20)
 
 
diff --git a/web/package-lock.json b/web/package-lock.json
index 6c67ff6b..f925ec7c 100644
--- a/web/package-lock.json
+++ b/web/package-lock.json
@@ -1,12 +1,12 @@
 {
   "name": "classroom-alpha",
-  "version": "1.11.0",
+  "version": "1.12.0",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "classroom-alpha",
-      "version": "1.11.0",
+      "version": "1.12.0",
       "dependencies": {
         "@tailwindcss/vite": "^4.3.3",
         "@tanstack/react-form": "^1.33.2",
diff --git a/web/package.json b/web/package.json
index a6725c49..44a95eff 100644
--- a/web/package.json
+++ b/web/package.json
@@ -1,7 +1,7 @@
 {
   "name": "classroom-alpha",
   "private": true,
-  "version": "1.11.0",
+  "version": "1.12.0",
   "type": "module",
   "scripts": {
     "dev": "vite",