diff --git a/.go-version b/.go-version
index 843f863534..6681c8c19a 100644
--- a/.go-version
+++ b/.go-version
@@ -1 +1 @@
-1.19.4
+1.19.8
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 6eaedf1b66..727a9fcf24 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -4,6 +4,16 @@ Canonical reference for changes, improvements, and bugfixes for Boundary.
 
 ## Next
 
+## 0.12.2 (2023/04/04)
+
+### Security
+
+* Boundary now uses Go 1.19.8 to address CVE-2023-24536. See the
+  [Go announcement](https://groups.google.com/g/golang-announce/c/Xdv6JL9ENs8) for
+  more details.
+
+## 0.12.1 (2023/03/13)
+
 ### Bug Fixes
 
 * cli: Fix fallback parsing of un-typed credentials for `boundary connect`.
diff --git a/version/version_base.go b/version/version_base.go
index 57d98d36bd..931476a148 100644
--- a/version/version_base.go
+++ b/version/version_base.go
@@ -10,7 +10,7 @@ var (
 
 	// Version is the base version
 	// Default values - set when building locally (at build time)
-	Version = "0.12.1"
+	Version = "0.12.2"
 
 	// VersionPrerelease is also set at compile time, similarly to Version.
 	VersionPrerelease string