diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index 6bd1fbc..a178ff5 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -51,6 +51,9 @@ jobs:
     strategy:
       matrix:
         release:
+          - version: "8.2.0-rc.1"
+            dir: "v8"
+            extra-tags: ""
           - version: "8.1.0"
             dir: "v8"
             extra-tags: |
diff --git a/README.md b/README.md
index 62fb877..a9f1d76 100644
--- a/README.md
+++ b/README.md
@@ -21,6 +21,7 @@ docker run --rm \
 
 | Tag | oCIS Version |
 |-----|-------------|
+| `8.2.0-rc.1` | 8.2.0-rc.1 (release candidate — exact tag only, no floating tags) |
 | `8.1.0`, `8.1`, `8` | 8.1.0 (latest stable) |
 | `8.0.5`, `8.0` | 8.0.5 |
 | `<version>-YYYYMMDD` | Immutable per-build tag (e.g. `8.1.0-20260703`) |
diff --git a/v8/.trivyignore b/v8/.trivyignore
index 7a483a4..f799295 100644
--- a/v8/.trivyignore
+++ b/v8/.trivyignore
@@ -30,6 +30,7 @@ CVE-2026-25679 exp:2026-10-22
 CVE-2026-32280 exp:2026-10-22
 CVE-2026-32281 exp:2026-10-22
 CVE-2026-32283 exp:2026-10-22
+CVE-2026-39822 exp:2026-10-22
 
 # golang.org/x/crypto v0.51.0 (fixed in 0.52.0) — will be fixed in oCIS 8.0.6
 CVE-2026-39827 exp:2026-10-22
@@ -41,3 +42,4 @@ CVE-2026-39835 exp:2026-10-22
 CVE-2026-42508 exp:2026-10-22
 CVE-2026-46595 exp:2026-10-22
 CVE-2026-46597 exp:2026-10-22
+CVE-2026-39831 exp:2026-10-22