diff --git a/CHANGELOG.md b/CHANGELOG.md
index 6d06b9b7..c6033af8 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,3 +1,12 @@
+# [2.5.0](https://github.com/salesforcecli/plugin-trust/compare/2.4.35...2.5.0) (2023-07-31)
+
+
+### Features
+
+* let people know about plugin allowList ([4c000b6](https://github.com/salesforcecli/plugin-trust/commit/4c000b6f5ccd0c5d37ce9cf3ee409174c088422d))
+
+
+
 ## [2.4.35](https://github.com/salesforcecli/plugin-trust/compare/2.4.34...2.4.35) (2023-07-29)
 
 
diff --git a/package.json b/package.json
index f9a38f24..36e39e3e 100644
--- a/package.json
+++ b/package.json
@@ -1,7 +1,7 @@
 {
   "name": "@salesforce/plugin-trust",
   "description": "validate a digital signature for a npm package",
-  "version": "2.4.35",
+  "version": "2.5.0",
   "author": "Salesforce",
   "main": "lib/index.js",
   "bin": {