diff --git a/cmd/probod-bootstrap/CHANGELOG.md b/cmd/probod-bootstrap/CHANGELOG.md
index 937d5f6eb..a14825e5c 100644
--- a/cmd/probod-bootstrap/CHANGELOG.md
+++ b/cmd/probod-bootstrap/CHANGELOG.md
@@ -4,6 +4,16 @@ All notable changes to `probod-bootstrap` will be documented in this file.
 
 ## Unreleased
 
+## [0.2.0] - 2026-06-24
+
+### Breaking Changes
+
+- **All bootstrap env vars are now prefixed with `PROBOD_`** (e.g. `AUTH_COOKIE_SECRET` → `PROBOD_AUTH_COOKIE_SECRET`). Deployments must rename every bootstrap env var before upgrading.
+
+### Added
+
+- AWS Secrets Manager resolution: env values prefixed with `aws://<secret-id>` are fetched at startup using the standard AWS SDK credential chain and cached per run
+
 ## [0.1.2] - 2026-06-11
 
 ### Changed
diff --git a/cmd/probod-bootstrap/VERSION b/cmd/probod-bootstrap/VERSION
index d917d3e26..0ea3a944b 100644
--- a/cmd/probod-bootstrap/VERSION
+++ b/cmd/probod-bootstrap/VERSION
@@ -1 +1 @@
-0.1.2
+0.2.0