diff --git a/Cargo.lock b/Cargo.lock
index 5597d59..36ac7ef 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -570,7 +570,7 @@ dependencies = [
 
 [[package]]
 name = "common"
-version = "2.2.1"
+version = "2.3.0"
 dependencies = [
  "is_executable",
 ]
@@ -1436,7 +1436,7 @@ dependencies = [
 
 [[package]]
 name = "gpapi"
-version = "2.2.1"
+version = "2.3.0"
 dependencies = [
  "anyhow",
  "base64 0.21.5",
@@ -1470,7 +1470,7 @@ dependencies = [
 
 [[package]]
 name = "gpauth"
-version = "2.2.1"
+version = "2.3.0"
 dependencies = [
  "anyhow",
  "clap",
@@ -1491,7 +1491,7 @@ dependencies = [
 
 [[package]]
 name = "gpclient"
-version = "2.2.1"
+version = "2.3.0"
 dependencies = [
  "anyhow",
  "clap",
@@ -1513,7 +1513,7 @@ dependencies = [
 
 [[package]]
 name = "gpgui-helper"
-version = "2.2.1"
+version = "2.3.0"
 dependencies = [
  "anyhow",
  "clap",
@@ -1531,7 +1531,7 @@ dependencies = [
 
 [[package]]
 name = "gpservice"
-version = "2.2.1"
+version = "2.3.0"
 dependencies = [
  "anyhow",
  "axum",
@@ -2545,7 +2545,7 @@ dependencies = [
 
 [[package]]
 name = "openconnect"
-version = "2.2.1"
+version = "2.3.0"
 dependencies = [
  "cc",
  "common",
diff --git a/Cargo.toml b/Cargo.toml
index 69b2372..2e00906 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -5,7 +5,7 @@ members = ["crates/*", "apps/gpclient", "apps/gpservice", "apps/gpauth", "apps/g
 
 [workspace.package]
 rust-version = "1.70"
-version = "2.2.1"
+version = "2.3.0"
 authors = ["Kevin Yue <k3vinyue@gmail.com>"]
 homepage = "https://github.com/yuezk/GlobalProtect-openconnect"
 edition = "2021"
diff --git a/changelog.md b/changelog.md
index e705794..eb69578 100644
--- a/changelog.md
+++ b/changelog.md
@@ -1,5 +1,11 @@
 # Changelog
 
+## 2.3.0 - 2024-05-20
+
+- Support client certificate authentication (fix [#363](https://github.com/yuezk/GlobalProtect-openconnect/issues/363))
+- Support `--disable-ipv6`, `--reconnect-timeout` parameters (related: [#364](https://github.com/yuezk/GlobalProtect-openconnect/issues/364))
+- Use default labels if label fields are missing in prelogin response (fix [#357](https://github.com/yuezk/GlobalProtect-openconnect/issues/357))
+
 ## 2.2.1 - 2024-05-07
 
 - GUI: Restore the default browser auth implementation (fix [#360](https://github.com/yuezk/GlobalProtect-openconnect/issues/360))