diff --git a/.release-please-manifest.json b/.release-please-manifest.json
index 3f067b4e9..8e743839a 100644
--- a/.release-please-manifest.json
+++ b/.release-please-manifest.json
@@ -16,6 +16,6 @@
   "workflows-cli": "0.1.1",
   "+8": "0.0.0",
   "backend/identity-mapper": "0.1.1",
-  "backend/auth-gateway": "0.1.1",
+  "backend/auth-gateway": "0.1.2",
   "backend/auth-broker": "0.1.0"
 }
diff --git a/backend/auth-gateway/CHANGELOG.md b/backend/auth-gateway/CHANGELOG.md
index 101b7ea34..532d4b36d 100644
--- a/backend/auth-gateway/CHANGELOG.md
+++ b/backend/auth-gateway/CHANGELOG.md
@@ -1,5 +1,12 @@
 # Changelog
 
+## [0.1.2](https://github.com/DiamondLightSource/workflows/compare/auth-gateway@v0.1.1...auth-gateway@v0.1.2) (2026-08-28)
+
+
+### Features
+
+* **auth-gateway:** add option to set cookies to lax ([2f42078](https://github.com/DiamondLightSource/workflows/commit/2f42078c35538378acd4904a95851d84f195ea6a))
+
 ## [0.1.1](https://github.com/DiamondLightSource/workflows/compare/auth-gateway@v0.1.0...auth-gateway@v0.1.1) (2026-08-20)
 
 
diff --git a/backend/auth-gateway/Cargo.toml b/backend/auth-gateway/Cargo.toml
index b11e70835..9f30004e6 100644
--- a/backend/auth-gateway/Cargo.toml
+++ b/backend/auth-gateway/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "auth-gateway"
-version = "0.1.1"
+version = "0.1.2"
 edition = "2024"
 default-run = "auth-gateway"
 license-file = "../../LICENSE"
diff --git a/charts/dashboard/values.yaml b/charts/dashboard/values.yaml
index cdaa725da..e957787e0 100644
--- a/charts/dashboard/values.yaml
+++ b/charts/dashboard/values.yaml
@@ -2,22 +2,20 @@ configuration:
   keycloakUrl: https://identity.diamond.ac.uk
   keycloakRealm: dls
   keycloakClient: workflows-dashboard
-  keycloakScope: "openid profile posix-uid email"
+  keycloakScope: openid profile posix-uid email
   graphUrl: https://workflows.diamond.ac.uk/api
   graphWsUrl: wss://workflows.diamond.ac.uk/api/ws
-  sourceDir: "/usr/share/nginx/html"
-  useAuthGateway: "true"
+  sourceDir: /usr/share/nginx/html
+  useAuthGateway: 'true'
   authGatewayLoginUrl: https://workflows.diamond.ac.uk/auth
   logoutUrl: https://workflows.diamond.ac.uk/auth/logout
-
 image:
   registry: ghcr.io
   repository: diamondlightsource/workflows-dashboard
-  tag: ""
-  digest: ""
+  tag: ''
+  digest: ''
   pullPolicy: IfNotPresent
   pullSecrets: []
-
 deployment:
   replicas: 1
   annotations: []
@@ -32,13 +30,11 @@ deployment:
   nodeSelector: {}
   affinity: {}
   tolerations: []
-
 service:
   create: true
   annotations: []
   type: ClusterIP
   port: 80
-
 ingress:
   create: true
   className: nginx
@@ -62,22 +58,20 @@ ingress:
             port: 80
   tls: false
   annotations:
-    nginx.ingress.kubernetes.io/force-ssl-redirect: "true"
-    nginx.ingress.kubernetes.io/ssl-redirect: "true"
-    nginx.ingress.kubernetes.io/hsts: "true"
-    nginx.ingress.kubernetes.io/hsts-max-age: "86400"
-
+    nginx.ingress.kubernetes.io/force-ssl-redirect: 'true'
+    nginx.ingress.kubernetes.io/ssl-redirect: 'true'
+    nginx.ingress.kubernetes.io/hsts: 'true'
+    nginx.ingress.kubernetes.io/hsts-max-age: '86400'
 serviceAccount:
   create: true
-  name: ""
+  name: ''
   annotations: []
-
 authGateway:
   enabled: true
   image:
     registry: ghcr.io
     repository: diamondlightsource/workflows-auth-gateway
-    tag: "0.1.1"
+    tag: 0.1.2
     pullPolicy: IfNotPresent
     pullSecrets: []
   graphUrl: https://workflows.diamond.ac.uk/graphql
@@ -94,27 +88,22 @@ authGateway:
       cors_allow:
         - ^https:\/\/([a-zA-Z0-9\-]+\.)*diamond\.ac\.uk\/?
         - ^https?:\/\/localhost(:\d+)?\/?
-
       client_id:
         name: workflows-cluster-client
         key: client-id
         namespace: workflows
-
       client_secret:
         name: workflows-cluster-client
         key: client-secret
         namespace: workflows
-
       postgres_user:
         name: postgres-auth-service-password
         key: username
         namespace: workflows
-
       postgres_password:
         name: postgres-auth-service-password
         key: password
         namespace: workflows
-
       encryption_public_key:
         name: auth-keys
         key: encryption_public_key