diff --git a/auth/cmd/server/version.go b/auth/cmd/server/version.go
index 118dafb4..c2e3d612 100644
--- a/auth/cmd/server/version.go
+++ b/auth/cmd/server/version.go
@@ -7,4 +7,4 @@ package main
 
 // version is the current application version. On main this carries a -rc suffix;
 // drop the suffix when cutting a release tag, then bump to the next -rc version.
-const version = "0.7.2-rc"
+const version = "0.7.2"
diff --git a/compose.yml b/compose.yml
index f3c258bd..858b49dd 100644
--- a/compose.yml
+++ b/compose.yml
@@ -31,7 +31,7 @@ services:
       - proxy
 
   auth:
-    image: ghcr.io/no42-org/packyard-auth:0.7.2-rc
+    image: ghcr.io/no42-org/packyard-auth:0.7.2
     restart: unless-stopped
     cap_drop: [ALL]
     security_opt:
@@ -127,7 +127,7 @@ services:
       - proxy
 
   rpm:
-    image: ghcr.io/no42-org/packyard-rpm:0.7.2-rc
+    image: ghcr.io/no42-org/packyard-rpm:0.7.2
     restart: unless-stopped
     user: "101:101"             # run directly as nginx user — no privilege drop, no cap_add needed
     cap_drop: [ALL]
@@ -230,7 +230,7 @@ services:
       - backend
 
   static:
-    image: ghcr.io/no42-org/packyard-static:0.7.2-rc
+    image: ghcr.io/no42-org/packyard-static:0.7.2
     restart: unless-stopped
     user: "101:101"             # run directly as nginx user — no privilege drop, no cap_add needed
     cap_drop: [ALL]
diff --git a/rpm/VERSION b/rpm/VERSION
index 25a0b9fd..7486fdbc 100644
--- a/rpm/VERSION
+++ b/rpm/VERSION
@@ -1 +1 @@
-0.7.2-rc
+0.7.2
diff --git a/static/VERSION b/static/VERSION
index 25a0b9fd..7486fdbc 100644
--- a/static/VERSION
+++ b/static/VERSION
@@ -1 +1 @@
-0.7.2-rc
+0.7.2