diff --git a/.release-please-manifest.json b/.release-please-manifest.json
index 10d53e3..a3906fc 100644
--- a/.release-please-manifest.json
+++ b/.release-please-manifest.json
@@ -1,3 +1,3 @@
 {
-  ".": "2.8.1"
+  ".": "2.9.0"
 }
diff --git a/CHANGELOG.md b/CHANGELOG.md
index a4b3942..e417f31 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,5 +1,12 @@
 # Changelog
 
+## [2.9.0](https://github.com/sigbit/mcp-auth-proxy/compare/v2.8.1...v2.9.0) (2026-04-16)
+
+
+### Features
+
+* add HEADER_MAPPING_BASE flag to control JWT claims source for HEADER_MAPPING ([#144](https://github.com/sigbit/mcp-auth-proxy/issues/144)) ([a43f4f4](https://github.com/sigbit/mcp-auth-proxy/commit/a43f4f4d430c3929f59aaaea7bc258efee357d12)), closes [#143](https://github.com/sigbit/mcp-auth-proxy/issues/143)
+
 ## [2.8.1](https://github.com/sigbit/mcp-auth-proxy/compare/v2.8.0...v2.8.1) (2026-04-13)