diff --git a/package-lock.json b/package-lock.json
index a3834e6..0a4bb8f 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -1,12 +1,12 @@
 {
   "name": "skate-spots",
-  "version": "1.7.47",
+  "version": "1.7.48",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "skate-spots",
-      "version": "1.7.47",
+      "version": "1.7.48",
       "license": "AGPL-3.0-only",
       "dependencies": {
         "@bitcoinerlab/secp256k1": "^1.2.0",
diff --git a/package.json b/package.json
index c93c968..f92dd7b 100644
--- a/package.json
+++ b/package.json
@@ -1,7 +1,7 @@
 {
   "name": "skate-spots",
   "private": true,
-  "version": "1.7.47",
+  "version": "1.7.48",
   "license": "AGPL-3.0-only",
   "type": "module",
   "homepage": "https://skate-spots.org",
diff --git a/release-notes.txt b/release-notes.txt
index bc968ce..1015ea8 100644
--- a/release-notes.txt
+++ b/release-notes.txt
@@ -1,3 +1,16 @@
+🛑 Amber: no more popups after you navigate away
+- The DM inbox and Cordn notification readers decrypt message-by-message. When
+  you left the screen while Amber was open, the query was cancelled but the loop
+  kept launching Amber for every remaining message — the app looked possessed.
+- Every decrypt loop now checks the query's abort signal before the next message
+  and stops immediately. Closing the notification bell also stops its decrypt
+  loop.
+- The first half of a two-step DM decrypt is cached, so if you leave mid-request
+  the next visit only asks once for that message instead of asking twice again.
+- Cordn's crew-message fetch now honours the same cancellation rule.
+
+---
+
 ⚡ Faster open, no spinning logo
 - The cold-start splash now clears in about 0.7s instead of ~1.7s: no artificial
   hold, no long relay wait, and a hard 0.9s cap.