diff --git a/changelog.md b/changelog.md
index e1e319b..fdf47f4 100644
--- a/changelog.md
+++ b/changelog.md
@@ -1,5 +1,11 @@
 # Changelog
 
+## 2026-04-02 - 12.2.5 - fix(dcrouter)
+sync allowed tunnel edges when merged routes change
+
+- Triggers tunnelManager.syncAllowedEdges() after route updates are applied
+- Keeps derived ports in the Rust hub binary aligned with merged route changes
+
 ## 2026-04-02 - 12.2.4 - fix(routes)
 support profile and target metadata in route creation and refresh remote ingress routes after config initialization
 
diff --git a/ts/00_commitinfo_data.ts b/ts/00_commitinfo_data.ts
index 03b4777..8fa92a0 100644
--- a/ts/00_commitinfo_data.ts
+++ b/ts/00_commitinfo_data.ts
@@ -3,6 +3,6 @@
  */
 export const commitinfo = {
   name: '@serve.zone/dcrouter',
-  version: '12.2.4',
+  version: '12.2.5',
   description: 'A multifaceted routing service handling mail and SMS delivery functions.'
 }
diff --git a/ts/classes.dcrouter.ts b/ts/classes.dcrouter.ts
index 804fb91..6fa9784 100644
--- a/ts/classes.dcrouter.ts
+++ b/ts/classes.dcrouter.ts
@@ -478,11 +478,15 @@ export class DcRouter {
                   }
                 : undefined,
               this.referenceResolver,
-              // Sync merged routes to RemoteIngressManager whenever routes change
+              // Sync merged routes to RemoteIngressManager whenever routes change,
+              // then push updated derived ports to the Rust hub binary
               (routes) => {
                 if (this.remoteIngressManager) {
                   this.remoteIngressManager.setRoutes(routes as any[]);
                 }
+                if (this.tunnelManager) {
+                  this.tunnelManager.syncAllowedEdges();
+                }
               },
             );
             this.apiTokenManager = new ApiTokenManager();
diff --git a/ts_web/00_commitinfo_data.ts b/ts_web/00_commitinfo_data.ts
index 03b4777..8fa92a0 100644
--- a/ts_web/00_commitinfo_data.ts
+++ b/ts_web/00_commitinfo_data.ts
@@ -3,6 +3,6 @@
  */
 export const commitinfo = {
   name: '@serve.zone/dcrouter',
-  version: '12.2.4',
+  version: '12.2.5',
   description: 'A multifaceted routing service handling mail and SMS delivery functions.'
 }