diff --git a/CHANGELOG.md b/CHANGELOG.md
index 6dd3c84..2d31bb0 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,5 +1,19 @@
 # Changelog
 
+## [1.2.0](https://github.com/SignTools/SignTools-Builder/compare/v1.1.21...v1.2.0) (2026-11-11)
+
+
+### Features
+
+* require the key for every route and show the last job's live log in /status ([c7d2369](https://github.com/SignTools/SignTools-Builder/commit/c7d2369e3090517453333592893c9c3f6909b514))
+
+
+### Bug Fixes
+
+* bump deps ([03cd6e6](https://github.com/SignTools/SignTools-Builder/commit/03cd6e69095ba53aa89f5c6726bb9b68e3e40711))
+* don't crash when a job runs before secrets are set ([ed9ca06](https://github.com/SignTools/SignTools-Builder/commit/ed9ca06da157f13e4965e5bd32b59fa7732c0b1b))
+* pin deps ([3df34d2](https://github.com/SignTools/SignTools-Builder/commit/3df34d206e111dd0ab9d954bac54c77d84a8b06d))
+
 ## [1.1.21](https://github.com/SignTools/SignTools-Builder/compare/v1.1.20...v1.1.21) (2026-11-05)