diff --git a/.release-please-manifest.json b/.release-please-manifest.json
index af55ef0..37fcefa 100644
--- a/.release-please-manifest.json
+++ b/.release-please-manifest.json
@@ -1,3 +1,3 @@
 {
-  ".": "0.2.1"
+  ".": "1.0.0"
 }
diff --git a/CHANGELOG.md b/CHANGELOG.md
new file mode 100644
index 0000000..700bf4b
--- /dev/null
+++ b/CHANGELOG.md
@@ -0,0 +1,17 @@
+# Changelog
+
+## [1.0.0](https://github.com/sigbit/mcp-auth-proxy/compare/v0.2.1...v1.0.0) (2025-08-17)
+
+
+### ⚠ BREAKING CHANGES
+
+* GLOBAL_SECRET environment variable and --global-secret flag are no longer supported. Secrets are now automatically generated and persisted.
+
+### Features
+
+* replace global secret parameter with auto-generated secret ([#6](https://github.com/sigbit/mcp-auth-proxy/issues/6)) ([05ccbb2](https://github.com/sigbit/mcp-auth-proxy/commit/05ccbb23f22b5a528faed558e6e242cda9f67849))
+
+
+### Bug Fixes
+
+* update release workflow permissions ([#8](https://github.com/sigbit/mcp-auth-proxy/issues/8)) ([2be8e5f](https://github.com/sigbit/mcp-auth-proxy/commit/2be8e5fccbe1cfcac69280b128f9ebecb2181d53))