diff --git a/CHANGELOG.md b/CHANGELOG.md
index cab6e7e3..5fb517a1 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -4,14 +4,26 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](http://keepachangelog.com/en/1.0.0/)
 and this project adheres to [Semantic Versioning](http://semver.org/spec/v2.0.0.html).
 
-## [Unreleased - 0.19.1] - DATE
+## [0.20.0] - 2022-05-26
 ### Added
+- Added Kubernetes auth method for Vault RAs.
+- Added support for reporting provisioners to linkedca.
+- Added support for certificate policies on authority level.
+- Added a Dockerfile with a step-ca build with HSM support.
+- A few new WithXX methods for instantiating authorities
 ### Changed
+- Context usage in HTTP APIs.
+- Changed authentication for Vault RAs.
+- Error message returned to client when authenticating with expired certificate.
+- Strip padding from ACME CSRs.
 ### Deprecated
-### Removed
+- HTTP API handler types.
 ### Fixed
 - Fixed SSH revocation.
-### Security
+- CA client dial context for js/wasm target.
+- Incomplete `extraNames` support in templates.
+- SCEP GET request support.
+- Large SCEP request handling.
 
 ## [0.19.0] - 2022-04-19
 ### Added
@@ -28,6 +40,7 @@ and this project adheres to [Semantic Versioning](http://semver.org/spec/v2.0.0.
   When a context has been configured and no configuration file is provided
   on startup, the configuration for the current context is used.
 - Added startup info logging and option to skip it (`--quiet`).
+- Added support for renaming the CA (Common Name).
 ### Changed
 - Made SCEP CA URL paths dynamic.
 - Support two latest versions of Go (1.17, 1.18).