diff --git a/CHANGES.md b/CHANGES.md
index 95c95ce..291b875 100644
--- a/CHANGES.md
+++ b/CHANGES.md
@@ -1,3 +1,13 @@
+0.14.0 (2024-12-06)
+-------------------
+
+-   Use `autocomplete="one-time-code"` on form inputs
+-   Set `Auto-Submitted` header in emails
+-   Align handling of localhost as a secure context with upstream. Notably,
+    this means that `DEBUG` no longer has any effect and that `127.0.0.1` is no
+    longer treated as a secure context.
+
+
 0.13.0 (2024-06-18)
 -------------------
 
diff --git a/pyproject.toml b/pyproject.toml
index faacfbf..1a275c1 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "django-mfa3"
-version = "0.13.0"
+version = "0.14.0"
 description = "multi factor authentication for django"
 readme = "README.md"
 license = {text = "MIT"}