diff --git a/.release-please-manifest.json b/.release-please-manifest.json
index 5fdd883..895bf0e 100644
--- a/.release-please-manifest.json
+++ b/.release-please-manifest.json
@@ -1,3 +1,3 @@
 {
-  ".": "1.1.0"
+  ".": "2.0.0"
 }
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 1eccd31..630738b 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,5 +1,17 @@
 # Changelog
 
+## [2.0.0](https://github.com/meigma/github-token-broker/compare/v1.1.0...v2.0.0) (2026-04-30)
+
+
+### ⚠ BREAKING CHANGES
+
+* **security:** harden broker deployment boundaries ([#31](https://github.com/meigma/github-token-broker/issues/31))
+
+### Bug Fixes
+
+* **security:** harden broker deployment boundaries ([#31](https://github.com/meigma/github-token-broker/issues/31)) ([3285df2](https://github.com/meigma/github-token-broker/commit/3285df2b36cbb1aeb7f910bf231488852bb51a8d))
+* **terraform:** support AWS provider v5 region data ([#33](https://github.com/meigma/github-token-broker/issues/33)) ([a6cc7dd](https://github.com/meigma/github-token-broker/commit/a6cc7dd4e9b804260530d20440b4a08d852a6a01))
+
 ## [1.1.0](https://github.com/meigma/github-token-broker/compare/v1.0.0...v1.1.0) (2026-04-23)