diff --git a/CHANGELOG.md b/CHANGELOG.md
index 5f2556e7..cb3dd6ef 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -7,6 +7,18 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [0.17.0] - 2026-05-19
+
+### Added
+
+- Add OAuth 2.1 client support for MCP authorization flow (#353)
+
+### Fixed
+
+- Validate `MCP-Protocol-Version` header in `StreamableHTTPTransport` (#347)
+- Reject duplicate `initialize` requests (#350)
+- Reject non-Hash JSON-RPC bodies in `StreamableHTTPTransport` (#354)
+
 ## [0.16.0] - 2026-05-14
 
 ### Added
diff --git a/lib/mcp/version.rb b/lib/mcp/version.rb
index 4410816e..ff392d29 100644
--- a/lib/mcp/version.rb
+++ b/lib/mcp/version.rb
@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module MCP
-  VERSION = "0.16.0"
+  VERSION = "0.17.0"
 end