diff --git a/CHANGELOG.md b/CHANGELOG.md
index c9bf1302..49b01835 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -2,6 +2,26 @@
 
 ## [Unreleased]
 
+## [v1.11.2] — 2026-06-10
+
+### Fixed
+
+#### `reusable-burndown.yml` — runner image updated to `ob-18f0014`
+
+Updated all container `image:` references from `ob-77dfdfa` to `ob-18f0014`. The
+previous image's baked binary passed `ContextManagement={type:"compaction"}` in
+`ResponseNewParams` to OpenAI's Responses API, which rejects it with
+`400 "Unsupported context_management type: ''."` — every `dispatch-one` call
+failed at iter 1. Fixed upstream in `falkcorp/overnight-burndown#62`; new image
+baked from `overnight-burndown@18f0014` (falkcorp/burndown-runner-image#23).
+
+#### `reusable-burndown.yml` — declare `JF_CI_GH_PAT` in `workflow_call` secrets (v1.11.1)
+
+`secrets.JF_CI_GH_PAT` was referenced in 4 container `credentials.password`
+blocks but never declared in `on.workflow_call.secrets`. GitHub validates
+reusable workflow secrets at parse time; any caller failed immediately with
+"workflow file issue". Added `JF_CI_GH_PAT: required: false`. (PR #305)
+
 ## [v1.11.0] — 2026-06-09
 
 ### Added
diff --git a/TODO.md b/TODO.md
index 235de458..88b83382 100644
--- a/TODO.md
+++ b/TODO.md
@@ -1,10 +1,20 @@
 <!-- file: TODO.md -->
-<!-- version: 2.3.3 -->
+<!-- version: 2.3.4 -->
 <!-- guid: 4d5e6f7a-8b9c-0d1e-2f3a-4b5c6d7e8f9a -->
-<!-- last-edited: 2026-05-31 -->
+<!-- last-edited: 2026-06-10 -->
 
 # TODO
 
+## ✅ Recently completed (June 10, 2026)
+
+- [x] **BRN-PAT** Declare `JF_CI_GH_PAT` in `reusable-burndown.yml`
+      `workflow_call` secrets — callers were failing with "workflow file issue"
+      (PR #305)
+- [x] **BRN-IMG** Update runner image to `ob-18f0014` — removes broken
+      `ContextManagement` OpenAI param that caused every `dispatch-one` to fail
+      with `400 "Unsupported context_management type: ''"` (PR #306, auto-merged
+      by retag CI)
+
 ## 🤖 Background Agent Queue (manage_todo_list sync)
 
 - [ ] Plan security workflow actionization - Goal: Move security scanning logic