diff --git a/UPSTREAM_DIFF.md b/UPSTREAM_DIFF.md
index 7e7d390..156a88e 100644
--- a/UPSTREAM_DIFF.md
+++ b/UPSTREAM_DIFF.md
@@ -1,44 +1,26 @@
 # Upstream API Diff
 
-> Old routes: 36 · New routes: 58
+> dashboard@v1.6.23 (bump from @photon-ai/dashboard-api 1.6.22 → 1.6.23)
 
 ## Added Routes
 
-| Route | Method |
-|-------|--------|
-| `api.profile.spectrum-updates` | `PATCH` |
-| `api.projects.:id.members` | `GET` |
-| `api.projects.:id.members` | `POST` |
-| `api.projects.:id.members.:memberUserId` | `DELETE` |
-| `api.projects.:id.slack` | `DELETE` |
-| `api.projects.:id.slack` | `GET` |
-| `api.projects.:id.slack` | `PUT` |
-| `api.projects.:id.slack.installations` | `GET` |
-| `api.projects.:id.slack.installations.:teamId` | `DELETE` |
-| `api.projects.:id.spectrum.avatar` | `DELETE` |
-| `api.projects.:id.spectrum.avatar.commit` | `POST` |
-| `api.projects.:id.spectrum.avatar.upload` | `POST` |
-| `api.projects.:id.voice.imessage-enabled` | `PATCH` |
-| `api.projects.:id.voice.settings` | `GET` |
-| `api.projects.:id.voice.sip-inbound` | `DELETE` |
-| `api.projects.:id.voice.sip-inbound` | `PATCH` |
-| `api.projects.:id.webhooks` | `GET` |
-| `api.projects.:id.webhooks` | `POST` |
-| `api.projects.:id.webhooks.:webhookId` | `DELETE` |
-| `api.projects.:id.whatsapp.templates` | `GET` |
-| `api.projects.:id.whatsapp.templates` | `POST` |
-| `api.projects.:id.whatsapp.templates.:templateId` | `DELETE` |
-| `api.projects.:id.whatsapp.templates.:templateId` | `PATCH` |
+_(none)_
 
 ## Removed Routes
 
-| Route | Method |
-|-------|--------|
-| `api.projects.:id.spectrum.avatar-upload-url` | `GET` |
+_(none)_
+
+## Changed Routes
+
+_(none — no route surface changes)_
+
+## Other type changes
+
+- `CaptchaProvider` union changed from `"google-recaptcha" | "turnstile"` to `"hcaptcha" | "turnstile"` (dashboard#272/#273/#274 hCaptcha rollout). Not referenced by the CLI, no code impact.
 
 ## Summary
 
-- **23** added
-- **1** removed
-- **0** changed
-- **35** unchanged
+- **0** added
+- **0** removed
+- **0** changed (route surface)
+- 1 non-route type refinement (`CaptchaProvider`)
diff --git a/bun.lock b/bun.lock
index 57ccf69..d8d3b6b 100644
--- a/bun.lock
+++ b/bun.lock
@@ -17,7 +17,7 @@
         "update-notifier": "^7.3.1",
       },
       "devDependencies": {
-        "@photon-ai/dashboard-api": "1.6.12",
+        "@photon-ai/dashboard-api": "1.6.23",
         "@types/bun": "latest",
         "@types/node": "^25.6.2",
         "@types/semver": "^7.7.1",
@@ -52,7 +52,7 @@
 
     "@noble/hashes": ["@noble/hashes@2.2.0", "", {}, "sha512-IYqDGiTXab6FniAgnSdZwgWbomxpy9FtYvLKs7wCUs2a8RkITG+DFGO1DM9cr+E3/RgADRpFjrKVaJ1z6sjtEg=="],
 
-    "@photon-ai/dashboard-api": ["@photon-ai/dashboard-api@1.6.12", "", { "peerDependencies": { "@elysiajs/eden": "^1.4.9", "elysia": "^1.4.28" } }, "sha512-CxUyvSpJmi5dn3razikiD8xw6l1YN3dflRlBghukV/fYIQaSL25UNJpaBYjdX8Qj0ka4+/RLJoloBdQdUTstmA=="],
+    "@photon-ai/dashboard-api": ["@photon-ai/dashboard-api@1.6.23", "", { "peerDependencies": { "@elysiajs/eden": "^1.4.9", "elysia": "^1.4.28" } }, "sha512-bubL7CYynX1jSVMkJ4k1Q2PA73A6hwh0j+n5DwOvyu3kohpcXUs9RkAmJEFpLu5xSg3voDm8apQsOkc0G9A0zw=="],
 
     "@pnpm/config.env-replace": ["@pnpm/config.env-replace@1.1.0", "", {}, "sha512-htyl8TWnKL7K/ESFa1oW2UB5lVDxuF5DpM7tBi6Hu2LNL3mWkIzNLG6N4zoCUP1lCKNxWy/3iu8mS8MvToGd6w=="],
 
diff --git a/package.json b/package.json
index 087e62b..523baf6 100644
--- a/package.json
+++ b/package.json
@@ -49,7 +49,7 @@
     "prepublishOnly": "bun run typecheck && bun run build"
   },
   "devDependencies": {
-    "@photon-ai/dashboard-api": "1.6.12",
+    "@photon-ai/dashboard-api": "1.6.23",
     "@types/bun": "latest",
     "@types/node": "^25.6.2",
     "@types/semver": "^7.7.1",