diff --git a/contrib/aur/.SRCINFO b/contrib/aur/.SRCINFO
index 25ffcfe..60e7481 100644
--- a/contrib/aur/.SRCINFO
+++ b/contrib/aur/.SRCINFO
@@ -1,6 +1,6 @@
 pkgbase = beefy-player
 	pkgdesc = Flashy terminal player for internet radio with a live spectrum analyser
-	pkgver = 1.2.2
+	pkgver = 1.2.5
 	pkgrel = 1
 	url = https://tildeforge.dev/beefcarver/beefy-player
 	arch = any
@@ -22,7 +22,7 @@ pkgbase = beefy-player
 	optdepends = libpulse: capture the output monitor so the analyser follows what you hear (parec/pactl)
 	optdepends = mpv: preferred audio backend
 	optdepends = tmux: detect the outer terminal for kitty graphics passthrough inside tmux
-	source = beefy-player-1.2.2.tar.gz::https://tildeforge.dev/beefcarver/beefy-player/archive/941c7446384bf346e40d1438a7ce67939d9615df.tar.gz
-	sha256sums = 8ac568676ef5ef8345441c28e4f8f5d61fb06d5225e566ac578acae18672c778
+	source = beefy-player-1.2.5.tar.gz::https://tildeforge.dev/beefcarver/beefy-player/releases/download/v1.2.5/beefy_player-1.2.5.tar.gz
+	sha256sums = 344f2266cb63d05bf294349599ecef636b3c8c25c8b29bcf0eff8818394b5f74
 
 pkgname = beefy-player
diff --git a/contrib/aur/PKGBUILD b/contrib/aur/PKGBUILD
index 291aa2a..f5d901e 100644
--- a/contrib/aur/PKGBUILD
+++ b/contrib/aur/PKGBUILD
@@ -1,7 +1,7 @@
 # Maintainer: beefy-player contributors <beefcarver@tilde.club>
 
 pkgname=beefy-player
-pkgver=1.2.2
+pkgver=1.2.5
 pkgrel=1
 pkgdesc="Flashy terminal player for internet radio with a live spectrum analyser"
 arch=('any')
@@ -33,27 +33,25 @@ optdepends=(
   'tmux: detect the outer terminal for kitty graphics passthrough inside tmux'
 )
 
-# Upstream does not tag releases yet, so the source is the archive of the
-# commit that carries this version.  Once a `v$pkgver` tag exists, switch to
-#
-#   source=("$pkgname-$pkgver.tar.gz::$url/archive/v$pkgver.tar.gz")
-#
-_commit=941c7446384bf346e40d1438a7ce67939d9615df
-source=("$pkgname-$pkgver.tar.gz::$url/archive/$_commit.tar.gz")
-sha256sums=('8ac568676ef5ef8345441c28e4f8f5d61fb06d5225e566ac578acae18672c778')
+# The sdist attached to the v$pkgver release.  bump_packaging.py keeps
+# this and sha256sums in step with the tag; build/check/package use
+# $_srcname because the sdist unpacks to hatchling's PEP 503 name.
+_srcname="beefy_player-$pkgver"
+source=("$pkgname-$pkgver.tar.gz::$url/releases/download/v$pkgver/$_srcname.tar.gz")
+sha256sums=('344f2266cb63d05bf294349599ecef636b3c8c25c8b29bcf0eff8818394b5f74')
 
 build() {
-  cd "$pkgname"
+  cd "$_srcname"
   python -m build --wheel --no-isolation
 }
 
 check() {
-  cd "$pkgname"
+  cd "$_srcname"
   # The suite is offline: catalogues are fixtures, mpv/parec are faked.
   python -m pytest -q
 }
 
 package() {
-  cd "$pkgname"
+  cd "$_srcname"
   python -m installer --destdir="$pkgdir" dist/*.whl
 }