diff --git a/abra.sh b/abra.sh
index 9a5e880..a623292 100644
--- a/abra.sh
+++ b/abra.sh
@@ -21,6 +21,11 @@ export DB_ENTRYPOINT_VERSION=v1
 export PG_BACKUP_VERSION=v2
 export ENTRYPOINT_CSS_VERSION=v1
 
+clear_assets() {
+  rm -rf /web/dist/assets/*
+  echo "Assets cleared. Redeploy to repopulate from image, then run 'customize' if needed."
+}
+
 customize() {
   if [ -z "$1" ]; then
     echo "Usage: ... customize <assets_path>"
diff --git a/compose.yml b/compose.yml
index b7d0f71..1307ef9 100644
--- a/compose.yml
+++ b/compose.yml
@@ -70,7 +70,7 @@ services:
         - "traefik.http.routers.${STACK_NAME}.middlewares=${STACK_NAME}-redirect,${STACK_NAME}-frameOptions,${STACK_NAME}-redirect"
         - "traefik.http.middlewares.${STACK_NAME}-frameOptions.headers.customFrameOptionsValue=SAMEORIGIN"
         - "traefik.http.middlewares.${STACK_NAME}-frameOptions.headers.contentSecurityPolicy=frame-ancestors ${X_FRAME_OPTIONS_ALLOW_FROM}"
-        - "coop-cloud.${STACK_NAME}.version=11.0.1+2026.2.1"
+        - "coop-cloud.${STACK_NAME}.version=11.0.2+2026.2.1"
         - "traefik.http.middlewares.${STACK_NAME}-redirect.redirectregex.regex=^https://(${REDIRECTS})/(.*)"
         - "traefik.http.middlewares.${STACK_NAME}-redirect.redirectregex.replacement=https://${DOMAIN}/$${2}"
         - "traefik.http.middlewares.${STACK_NAME}-redirect.redirectregex.permanent=true"
diff --git a/release/11.0.2+2026.2.1 b/release/11.0.2+2026.2.1
new file mode 100644
index 0000000..1aff8cf
--- /dev/null
+++ b/release/11.0.2+2026.2.1
@@ -0,0 +1,9 @@
+This patch release adds a `clear_assets` command to fix stale font files after upgrading authentik.
+
+If fonts are missing after an upgrade (404 errors in browser console, or missing icons), the `assets` Docker volume contains stale files from the previous image. To fix:
+
+    abra app cmd <app-name> app clear_assets --user root
+    abra app undeploy <app-name> 
+    abra app deploy <app-name> 
+
+After redeploying, Docker repopulates the empty volume from the new image. If customize assets was used before, re-run `customize` afterwards.