diff --git a/.release-please-manifest.json b/.release-please-manifest.json
index e18ee07..37fcefa 100644
--- a/.release-please-manifest.json
+++ b/.release-please-manifest.json
@@ -1,3 +1,3 @@
 {
-  ".": "0.0.0"
+  ".": "1.0.0"
 }
diff --git a/CHANGELOG.md b/CHANGELOG.md
new file mode 100644
index 0000000..b32a0eb
--- /dev/null
+++ b/CHANGELOG.md
@@ -0,0 +1,14 @@
+# Changelog
+
+## 1.0.0 (2026-04-23)
+
+
+### Features
+
+* port broker core from reference implementation (phase 1a-1f) ([#4](https://github.com/meigma/github-token-broker/issues/4)) ([30e1f70](https://github.com/meigma/github-token-broker/commit/30e1f7016f940a8f12e4e0dc7ec05c262ef41d10))
+* tag-triggered publish pipeline with attestations ([#11](https://github.com/meigma/github-token-broker/issues/11)) ([c51372f](https://github.com/meigma/github-token-broker/commit/c51372f8df3180b01512d068fcb25229d79140ad))
+
+
+### Bug Fixes
+
+* enforce repository owner before minting tokens ([#7](https://github.com/meigma/github-token-broker/issues/7)) ([6682886](https://github.com/meigma/github-token-broker/commit/66828864904e049b27b1e4e16bb8c6df13d122a1))