diff --git a/CHANGELOG.md b/CHANGELOG.md
index 5ca4c5c5..9e35c838 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -31,7 +31,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 - License/subscription check
 - System email template branding (DB approach)
 
-## [02.01.25] - 2026-05-21
+## [02.01.27] - 2026-05-22
 
 ### Added
 - Health check endpoint at `/?mokowaas=health` with token authentication (#54)
@@ -43,13 +43,17 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 - Grafana plugin install via API (replaces deprecated CLI)
 - Dashboard with endpoint dropdown for multi-site monitoring
 - Provisioning on plugin install/update via script.php postflight
-- Deprovisioning on disable (datasource cleanup)
-- Plugin config fields: enable_health_endpoint, health_api_token, grafana_url, grafana_api_key
 
 ### Changed
+- Health endpoint always enabled — no config toggle needed
+- Grafana credentials hardcoded and obfuscated (XOR+base64)
+- Removed config fields: enable_health_endpoint, grafana_url, grafana_api_key
+- Grafana dashboard rebuilt: plugin-only panels, no Prometheus blackbox dependency
 - Migrated .gitea/ to .mokogitea/ directory standard
 - Updated all workflow references from MokoStandards to moko-platform
-- Version bumped to 02.01.25
+
+### Security
+- Grafana API key obfuscated in source (not stored in plain text)
 
 ## [02.01.08] - 2026-04-07