diff --git a/CHANGELOG.md b/CHANGELOG.md
index b798faea88..9b0ec2744f 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,4 +1,10 @@
-### HEAD
+### 1.17.0: September 27th, 2022
+* [BREAKING] Disable HSTS `includeSubdomains` by default ([#1409](https://github.com/roots/trellis/pull/1409))
+* Don't use sudo for composer authentications in dev ([#1427](https://github.com/roots/trellis/pull/1427))
+* Sage 10 deploy: Fail if entrypoints are missing ([#1426](https://github.com/roots/trellis/pull/1426))
+* Nginx: add "text/javascript" to gzip_types ([#1424](https://github.com/roots/trellis/pull/1424))
+* Disable Landrush DNS Resolver in Parallels ([#1421](https://github.com/roots/trellis/pull/1421))
+* Remove dynamic SSH key host checks ([#1419](https://github.com/roots/trellis/pull/1419))
 * Update Vagrant required version ([#1420](https://github.com/roots/trellis/pull/1420))
 * Remove custom output callback plugin ([#1418](https://github.com/roots/trellis/pull/1418))
 * Migrage `with_X` looping usage to `loop` ([#1416](https://github.com/roots/trellis/pull/1416))
@@ -6,7 +12,6 @@
 * Simplify Nginx no-default sites for HTTPS ([#1414](https://github.com/roots/trellis/pull/1414))
 * Improve composer authentications password default ([#1412](https://github.com/roots/trellis/pull/1412))
 * Run composer check-platform-reqs during deploy ([#1411](https://github.com/roots/trellis/pull/1411))
-* [BREAKING] Disable HSTS `includeSubdomains` by default ([#1409](https://github.com/roots/trellis/pull/1409))
 * Fix #905, #831 - Update hb5p Nginx configs ([#1406](https://github.com/roots/trellis/pull/1406))
 
 ### 1.16.0: July 18th, 2022