diff --git a/CHANGELOG.md b/CHANGELOG.md
index ada640fc..730c2066 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -27,10 +27,24 @@ and this project adheres to [Semantic Versioning](http://semver.org/spec/v2.0.0.
 
 ## [Unreleased]
 
+## [v0.23.1] - 2022-01-10
+
 ### Added
 
 - Added configuration property `.crl.idpURL`  to be able to set a custom Issuing
-  Distribution Point in the CRL.
+  Distribution Point in the CRL (smallstep/certificates#1178).
+- Added WithContext methods to the CA client (smallstep/certificates#1211).
+- Docker: Added environment variables for enabling Remote Management and ACME
+  provisioner (smallstep/certificates#1201).
+- Docker: The entrypoint script now generates and displays an initial JWK
+  provisioner password by default when the CA is being initialized
+  (smallstep/certificates#1223).
+
+### Changed
+
+- Ignore SSH principals validation when using an OIDC provisioner. The
+  provisioner will ignore the principals passed and set the defaults or the ones
+  including using WebHooks or templates (smallstep/certificates#1206).
 
 ## [v0.23.0] - 2022-11-11