diff --git a/CHANGELOG.md b/CHANGELOG.md
index e7be052..d24e3d8 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -7,6 +7,24 @@ and this project uses [Semantic Versioning](https://semver.org/spec/v2.0.0.html)
 
 ## [Unreleased]
 
+## [0.84.0] - 2026-11-02
+
+Needs DirXMLDev 0.61.0.
+
+### Fixed
+
+- **A driver's shim password set by a deploy now works** (DirXMLDev 0.61.0). Before, a deploy that
+  set `<driver>.shim-auth-password` wrote it to the vault in clear text. The shim then connected
+  with no DN and no password, and the engine refused to change that password afterwards (`-638`).
+  The password is now set through the engine, as Designer and iManager do it. When it meets a
+  clear-text value left by an earlier version, it removes it and sets the password again, and the
+  deploy's notes say so. **Upgrading:** set the shim password once more, with a deploy or in
+  Designer or iManager, on every driver where an earlier version set it.
+
+### Changed
+
+- The hosted install says how to cap the server's memory on a shared host (#179).
+
 ## [0.83.0] - 2026-10-29
 
 Needs DirXMLDev 0.59.0.
diff --git a/pom.xml b/pom.xml
index fc60eb0..ffce66f 100644
--- a/pom.xml
+++ b/pom.xml
@@ -6,7 +6,7 @@
 
     <groupId>com.pointblue.dirxml</groupId>
     <artifactId>dirxml-dev-web</artifactId>
-    <version>0.83.0</version>
+    <version>0.84.0</version>
     <licenses>
         <license>
             <name>MIT License</name>
@@ -23,7 +23,7 @@
         <!-- The DirXMLDev release this server is written against. Install it once with
              `mvn -o install -DskipTests` in the DirXMLDev checkout; bin/idmweb then runs
              against that checkout's classes, engine jars and simulator. -->
-        <dirxmldev.version>0.59.0</dirxmldev.version>
+        <dirxmldev.version>0.61.0</dirxmldev.version>
         <simulator.version>1.7.0</simulator.version>
         <!-- the DirXML Trace Viewer's library: parser, highlighter, LDAP trace source (its release attaches the jar) -->
         <!-- Directory Console's shared libraries (console-auth: OIDC sign-in, TLS trust). Install with
diff --git a/src/main/java/com/pointblue/dirxml/web/Serve.java b/src/main/java/com/pointblue/dirxml/web/Serve.java
index 27d3901..1513ebf 100644
--- a/src/main/java/com/pointblue/dirxml/web/Serve.java
+++ b/src/main/java/com/pointblue/dirxml/web/Serve.java
@@ -14,7 +14,7 @@
  */
 public final class Serve {
 
-    public static final String VERSION = "0.83.0";
+    public static final String VERSION = "0.84.0";
 
     private Serve() {
     }