diff --git a/CHANGELOG.md b/CHANGELOG.md
index 11374de..d6bbee2 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,3 +1,17 @@
+<a name="1.126.0"></a>
+# [1.126.0](https://github.com/mozilla/fxa-profile-server/compare/v1.124.0...v1.126.0) (2018-11-27)
+
+
+### Bug Fixes
+
+* **audit:** rewrap deps to fix security warnings ([490bd56](https://github.com/mozilla/fxa-profile-server/commit/490bd56)), closes [#354](https://github.com/mozilla/fxa-profile-server/issues/354) [#355](https://github.com/mozilla/fxa-profile-server/issues/355)
+
+### Refactor
+
+* **headers:** remove HPKP headers ([69dfe39](https://github.com/mozilla/fxa-profile-server/commit/69dfe39)), closes [#352](https://github.com/mozilla/fxa-profile-server/issues/352)
+
+
+
 <a name="1.124.0"></a>
 # [1.124.0](https://github.com/mozilla/fxa-profile-server/compare/v1.123.0...v1.124.0) (2018-10-30)
 
diff --git a/npm-shrinkwrap.json b/npm-shrinkwrap.json
index 90fd942..cc6c877 100644
--- a/npm-shrinkwrap.json
+++ b/npm-shrinkwrap.json
@@ -1,6 +1,6 @@
 {
   "name": "fxa-profile-server",
-  "version": "1.124.0",
+  "version": "1.126.0",
   "lockfileVersion": 1,
   "requires": true,
   "dependencies": {
diff --git a/package.json b/package.json
index 84d60fd..81868ab 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "fxa-profile-server",
-  "version": "1.124.0",
+  "version": "1.126.0",
   "private": true,
   "description": "Firefox Accounts Profile service.",
   "scripts": {