diff --git a/swingmusic/docker-compose.yml b/swingmusic/docker-compose.yml
index 485f710e..2384dd6f 100644
--- a/swingmusic/docker-compose.yml
+++ b/swingmusic/docker-compose.yml
@@ -1,20 +1,19 @@
-version: "3.9"
-
-services:
-  app_proxy:
-    environment:
-      APP_HOST: swingmusic_app_1
-      APP_PORT: 1970
-      PROXY_AUTH_ADD: "false"
-
-  app:
-    image: ghcr.io/swingmx/swingmusic:v2.0.9@sha256:f8dcd4e074355de8fe5e8ae256c0af0441715a0eaf0bf2eabaebc65447ea716c
-    restart: on-failure
-    environment:
-      - PUID=1000
-      - PGID=1000
-    volumes:
-      - ${APP_DATA_DIR}/data/config:/config
-      - ${APP_DATA_DIR}/data/music:/music:rw
-      - ${UMBREL_ROOT}/data/storage/downloads:/downloads
-
+version: "3.9"
+
+services:
+  app_proxy:
+    environment:
+      APP_HOST: swingmusic_app_1
+      APP_PORT: 1970
+      PROXY_AUTH_ADD: "false"
+
+  app:
+    image: ghcr.io/swingmx/swingmusic:v2.1.3@sha256:45eaad09a99e54a2e76c6b17364b150f4f384933b734442e0c55350fc369d001
+    restart: on-failure
+    environment:
+      - PUID=1000
+      - PGID=1000
+    volumes:
+      - ${APP_DATA_DIR}/data/config:/config
+      - ${APP_DATA_DIR}/data/music:/music:rw
+      - ${UMBREL_ROOT}/data/storage/downloads:/downloads
diff --git a/swingmusic/umbrel-app.yml b/swingmusic/umbrel-app.yml
index 89f7ed4d..ec58128e 100644
--- a/swingmusic/umbrel-app.yml
+++ b/swingmusic/umbrel-app.yml
@@ -3,7 +3,7 @@ id: swingmusic
 name: Swing Music
 tagline: Self-hosted music streaming
 category: media
-version: "2.0.9"
+version: "2.1.3"
 port: 1970
 description: >-
   🎵 Swing Music is a self-hosted music streaming app — modern, clean, and powerful.
@@ -24,7 +24,19 @@ support: https://github.com/swing-opensource/swingmusic/issues
 defaultUsername: "admin"
 defaultPassword: "admin"
 dependencies: []
-releaseNotes: ""
+releaseNotes: >-
+  🚨 This release fixes a critical security vulnerability that allowed an authenticated user to download arbitrary files from the host server. If you are running an older release, please upgrade immediately, especially if your server is exposed to the internet.
+
+
+  What's new in this release:
+    - Stats cards now use the album or artist accent color
+    - Fixed lowercase letter "b" being removed from track metadata
+    - Fixed double click on tracks not playing
+    - Fixed SEE ALL button visibility on favorites and artist pages
+    - Fixed server startup issues due to misconfigured web client
+
+
+  Full release notes can be found at https://github.com/swing-opensource/swingmusic/releases
 path: "/"
 gallery:
   - 1.jpg