diff --git a/apps/docs/content/guides/self-hosting/docker.mdx b/apps/docs/content/guides/self-hosting/docker.mdx
index 3886c2f8ec6..d1ec5d98bd1 100644
--- a/apps/docs/content/guides/self-hosting/docker.mdx
+++ b/apps/docs/content/guides/self-hosting/docker.mdx
@@ -123,7 +123,7 @@ A shallow clone of the full Supabase repository. Works on any OS with `git` inst
 
 ```sh
 # Get the code
-git clone --depth 1 --branch self-hosted/v0.8.1 https://github.com/supabase/supabase
+git clone --depth 1 --branch self-hosted/v0.8.2 https://github.com/supabase/supabase
 
 # Make your new supabase project directory
 mkdir supabase-project
@@ -140,7 +140,7 @@ cp -rf supabase/docker/. supabase-project
 cd supabase-project && cp .env.example .env
 
 # Record the base version so update.sh can upgrade this install later
-printf 'ref=self-hosted/v0.8.1\n' > .supabase-version
+printf 'ref=self-hosted/v0.8.2\n' > .supabase-version
 
 # Pull the latest images
 docker compose pull
@@ -154,7 +154,7 @@ Only downloads the `docker/` directory from the repository, saving bandwidth and
 
 ```sh
 # Get the code using git sparse checkout
-git clone --filter=blob:none --no-checkout --depth=1 --quiet --branch self-hosted/v0.8.1 https://github.com/supabase/supabase
+git clone --filter=blob:none --no-checkout --depth=1 --quiet --branch self-hosted/v0.8.2 https://github.com/supabase/supabase
 cd supabase
 git sparse-checkout init --cone
 git sparse-checkout set docker
@@ -176,7 +176,7 @@ cp -rf supabase/docker/. supabase-project
 cd supabase-project && cp .env.example .env
 
 # Record the base version so update.sh can upgrade this install later
-printf 'ref=self-hosted/v0.8.1\n' > .supabase-version
+printf 'ref=self-hosted/v0.8.2\n' > .supabase-version
 
 # Pull the latest images
 docker compose pull
diff --git a/docker/CHANGELOG.md b/docker/CHANGELOG.md
index 961173b0d0c..8eafb86b66c 100644
--- a/docker/CHANGELOG.md
+++ b/docker/CHANGELOG.md
@@ -10,6 +10,41 @@ See per-service updates below for details. Only the most important changes relev
 
 ---
 
+## Upcoming deprecations
+
+⚠️ The following optional Compose override files and their associated services will be removed in a future release:
+
+- `docker-compose.kong.yml` - Kong API gateway (superseded by Envoy)
+- `docker-compose.s3.yml` - S3-compatible storage via MinIO (use the RustFS override instead)
+- `docker-compose.pg15.yml` - Postgres 15 (Postgres 17 has been the default since [0.6.0](#060---2026-06-17))
+
+If you depend on any of these overrides, plan to migrate before they are removed.
+
+---
+
+## [0.8.2](https://github.com/supabase/supabase/releases/tag/self-hosted/v0.8.2) - 2026-09-23
+
+### Documentation
+- Added a new how-to guide [Custom OAuth/OIDC Providers](https://supabase.com/docs/guides/self-hosting/self-hosted-custom-oauth-providers) - PR [#49971](https://github.com/supabase/supabase/pull/49971) (via [@singh-inder](https://github.com/singh-inder/))
+
+### Utils and tests
+- Fixed `setup.sh` to work for non-root Docker users - PR [#50653](https://github.com/supabase/supabase/pull/50653) (via [@oliveres](https://github.com/oliveres), [@Harsh4r0ra](https://github.com/Harsh4r0ra), and [@melcheikh](https://github.com/melcheikh))
+
+### API gateway
+- Added `/.well-known/oauth-authorization-server` route to Caddy and nginx configuration (requires `volumes/proxy/caddy/Caddyfile` and `volumes/proxy/nginx/supabase-nginx.conf.tpl` update) - PR [#50306](https://github.com/supabase/supabase/pull/50306) (via [@mandar1045](https://github.com/mandar1045))
+
+### Storage
+- Added `volumes/storage/.gitkeep` to simplify the initial setup with rootless Docker - PR [#50299](https://github.com/supabase/supabase/pull/50299) (via [@sidgaikwad](https://github.com/sidgaikwad))
+
+### Edge Runtime
+- Updated main worker to follow the `{ code, message }` format for errors (requires `volumes/functions/main/index.ts` update) - PR [#48012](https://github.com/supabase/supabase/pull/48012) (via [@7ttp](https://github.com/7ttp))
+
+### Postgres
+- ⚠️ Removed `app.settings.jwt_secret` from the database initialization - PR [#45003](https://github.com/supabase/supabase/pull/45003) (via [@rxxbyy](https://github.com/rxxbyy))
+- ⚠️ Added an additional grant for `supabase_functions_admin` on database initialization - PR [#46526](https://github.com/supabase/supabase/pull/46526) (via [@narendraio](https://github.com/narendraio))
+
+---
+
 ## [0.8.1](https://github.com/supabase/supabase/releases/tag/self-hosted/v0.8.1) - 2026-09-09
 
 ### Configuration
diff --git a/docker/README.md b/docker/README.md
index 48c8220c72f..8d6f6774b48 100644
--- a/docker/README.md
+++ b/docker/README.md
@@ -85,7 +85,7 @@ Share your self-hosting experience:
 Before deploying to production, you must:
 - [Update](https://supabase.com/docs/guides/self-hosting/docker#configuring-and-securing-supabase) all default passwords and secrets in the `.env` file
 - Review and update CORS settings
-- Consider setting up a secure proxy in front of self-hosted Supabase
+- Set up a [secure proxy](https://supabase.com/docs/guides/self-hosting/self-hosted-proxy-https) in front of your self-hosted Supabase
 - Review and adjust network security configuration (ACLs, etc.)
 - Set up proper backup procedures