diff --git a/CHANGELOG.md b/CHANGELOG.md
index f578980..e01b24d 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -5,6 +5,16 @@ Format follows [Keep a Changelog](https://keepachangelog.com/en/1.0.0/), version
 
 ---
 
+## [1.8.3] — 2026-04-06
+
+### Fixed
+- **`TopEventsAPI` now works without authentication** — `POST /api/events/top-events/` had `AllowAny` permission but still called `validate_token_and_get_user()`, returning `{"status":"error","message":"token and username required"}` for unauthenticated requests
+  - Removed `validate_token_and_get_user()` call entirely
+  - Added `event_status='published'` filter (was `is_top_event=True` only)
+  - Added `event_type_name` field resolution: `e.event_type.event_type if e.event_type else ''` — `model_to_dict()` only returns the FK integer
+
+---
+
 ## [1.8.2] — 2026-04-06
 
 ### Fixed