diff --git a/Dockerfile b/Dockerfile
index 11049a6..7e9a0d5 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -26,8 +26,8 @@ RUN case "${TARGETARCH}" in \
 # Pinned to the latest upstream release. Bump WISP_VERSION and WISP_COMMIT to
 # update (see UPDATING.md). WISP_COMMIT is the immutable commit the tag points
 # to; the guard below fails the build if the tag is ever re-pointed.
-ARG WISP_VERSION=v0.5.4
-ARG WISP_COMMIT=c811d1cd83a65549062c7a37c45468845794fe3b
+ARG WISP_VERSION=v0.5.5
+ARG WISP_COMMIT=76a3261369ff4a2b5dedb778e8b1d42184800ea4
 RUN git clone --branch ${WISP_VERSION} --depth 1 https://github.com/privkeyio/wisp.git /src && \
     HEAD_SHA="$(git -C /src rev-parse HEAD)" && \
     if [ "${HEAD_SHA}" != "${WISP_COMMIT}" ]; then \
diff --git a/startos/versions/current.ts b/startos/versions/current.ts
index c98c46b..0046d41 100644
--- a/startos/versions/current.ts
+++ b/startos/versions/current.ts
@@ -1,10 +1,10 @@
 import { IMPOSSIBLE, VersionInfo } from '@start9labs/start-sdk'
 
 export const current = VersionInfo.of({
-  version: '0.5.4:0',
+  version: '0.5.5:0',
   releaseNotes: {
     en_US:
-      'Updates wisp to v0.5.4: fixes a crash (SIGSEGV) that hit the relay a few hours into sustained client traffic, caused by a use-after-free in the inbound connection worker. Confirmed stable across 13+ hours of real load. Carries forward all prior fixes: crash-safe storage, stable Spider upstream connections, no per-IP cap behind the StartOS proxy, and the diagnosable (ReleaseSafe) build.',
+      'Updates wisp to v0.5.5. No behavior change from v0.5.4: wisp now builds against the upstream http.zig and websocket.zig libraries instead of temporary forks, since all of its fixes have been merged upstream. Carries forward every prior fix: the inbound-worker crash fix, crash-safe storage, stable Spider upstream connections, no per-IP cap behind the StartOS proxy, and the diagnosable (ReleaseSafe) build.',
   },
   migrations: {
     up: async ({ effects }) => {},