diff --git a/.devcontainer/CHANGELOG.md b/.devcontainer/CHANGELOG.md
index 4801313..c86e2c9 100644
--- a/.devcontainer/CHANGELOG.md
+++ b/.devcontainer/CHANGELOG.md
@@ -187,6 +187,9 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
   - Covers smoke-test deploy, prepare-release, release finalization, sync-issues, and workspace templates
 - **Release validation fails when bot approves PR** ([#438](https://github.com/vig-os/devcontainer/issues/438))
   - Add fallback to individual PR review check when `reviewDecision` is empty (bot approvals not counted by branch protection)
+- **Downstream candidate RC tag can match upstream dispatch** ([#441](https://github.com/vig-os/devcontainer/issues/441))
+  - Workspace `release.yml` / `release-core.yml` accept optional `rc-number` so candidate tags are not always recomputed from local tags only
+  - Smoke-test `repository-dispatch.yml` exposes `base_version` and `rc_number` job outputs for orchestration that calls workspace `release.yml`
 
 ### Security
 
diff --git a/.vig-os b/.vig-os
index f082d0d..2fd3640 100644
--- a/.vig-os
+++ b/.vig-os
@@ -1,2 +1,2 @@
 # vig-os devcontainer configuration
-DEVCONTAINER_VERSION=0.3.1-rc21
+DEVCONTAINER_VERSION=0.3.1-rc22
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 4801313..e204a3d 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -5,7 +5,7 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
-## [0.3.1] - TBD
+## Unreleased
 
 ### Added
 
@@ -187,6 +187,9 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
   - Covers smoke-test deploy, prepare-release, release finalization, sync-issues, and workspace templates
 - **Release validation fails when bot approves PR** ([#438](https://github.com/vig-os/devcontainer/issues/438))
   - Add fallback to individual PR review check when `reviewDecision` is empty (bot approvals not counted by branch protection)
+- **Downstream candidate RC tag can match upstream dispatch** ([#441](https://github.com/vig-os/devcontainer/issues/441))
+  - Workspace `release.yml` / `release-core.yml` accept optional `rc-number` so candidate tags are not always recomputed from local tags only
+  - Smoke-test `repository-dispatch.yml` exposes `base_version` and `rc_number` job outputs for orchestration that calls workspace `release.yml`
 
 ### Security