diff --git a/CHANGELOG.md b/CHANGELOG.md
index a314f4d34..aed4ebf64 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -4,6 +4,19 @@ All notable changes to this project will be documented in this file.
 
 ## Unreleased
 
+## [0.152.0] - 2026-03-25
+
+### Added
+
+- Add GraphQL dataloaders for batched record lookups
+- Check CAA records before ACME certificate issuance
+
+### Fixed
+
+- Fix Microsoft OIDC token exchange auth style
+- Fix SCIM bridge updating all users on every sync
+- Fix ACME challenge retry to create fresh orders
+
 ## [0.151.0] - 2026-03-24
 
 ### Added
diff --git a/GNUmakefile b/GNUmakefile
index 6639e5ba1..4bece81c9 100644
--- a/GNUmakefile
+++ b/GNUmakefile
@@ -20,7 +20,7 @@ DOCKER_BUILD=	DOCKER_BUILDKIT=1 $(DOCKER) build $(DOCKER_BUILD_FLAGS)
 
 DOCKER_COMPOSE=	$(DOCKER) compose -f compose.yaml $(DOCKER_COMPOSE_FLAGS)
 
-VERSION=	0.151.0
+VERSION=	0.152.0
 LDFLAGS=	-ldflags "-X 'main.version=$(VERSION)' -X 'main.env=prod'"
 GCFLAGS=	-gcflags="-e"