diff --git a/CHANGES b/CHANGES
index 8b3ba79ec3..51dc387ff0 100644
--- a/CHANGES
+++ b/CHANGES
@@ -1,3 +1,7 @@
+8.0.0-dev.104 | 2025-05-15 12:15:42 -0700
+
+  * Require non-system version of libkrb5 on macOS (Tim Wojtulewicz, Corelight)
+
 8.0.0-dev.102 | 2025-05-15 16:44:16 +0200
 
   * IXWebSocket: Point at upstream, bump to v11.4.6 (Arne Welzel, Corelight)
diff --git a/NEWS b/NEWS
index 0260ddbe59..4c9b4c6803 100644
--- a/NEWS
+++ b/NEWS
@@ -38,9 +38,10 @@ Changed Functionality
   published vectors with holes. A reporter error is produced at runtime when
   serialization of vectors with holes is attempted.
 
-- Using libkrb5 for Kerberos support is now allowed on macOS. Due to very old age and
-  brokenness, the system version of the library is unsupported and will fail to
-  configure. Use the version from Homebrew or another newer installation.
+- Kerberos support on macOS has been enabled. Due to incompatibilities, the system
+  provided libkrb5 is ignored, however. Only versions from homebrew are supported and
+  found/picked-up by default. Use --with-krb5 for pointing at a custom librkb5
+  installation.
 
 Removed Functionality
 ---------------------
diff --git a/VERSION b/VERSION
index 556968259c..67be9c26dc 100644
--- a/VERSION
+++ b/VERSION
@@ -1 +1 @@
-8.0.0-dev.102
+8.0.0-dev.104
diff --git a/cmake b/cmake
index c63efd65e8..8127d698a1 160000
--- a/cmake
+++ b/cmake
@@ -1 +1 @@
-Subproject commit c63efd65e874d689bb28aab390456b2d96941e15
+Subproject commit 8127d698a1c0e9bddc53b3f9ffc1e28c03d76f35