diff --git a/.bumpversion.cfg b/.bumpversion.cfg
index aa5c8653..5ad22382 100644
--- a/.bumpversion.cfg
+++ b/.bumpversion.cfg
@@ -1,5 +1,5 @@
 [bumpversion]
-current_version = 1.22.0
+current_version = 1.23.0
 commit = True
 tag = True
 parse = (?P<major>\d+)\.(?P<minor>\d+)\.(?P<revision>\d+)
diff --git a/CHANGELOG.md b/CHANGELOG.md
index c6ae7017..00e1d0ce 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -7,6 +7,8 @@ and this project adheres to [Semantic Versioning](http://semver.org/spec/v2.0.0.
 
 ## [Unreleased]
 
+## [1.23.0] - 2026-08-14
+
 ### Added
 
 - The packaged binary now bundles `keyrings.cryptfile` and `keyrings.alt`, encrypted/file-based `keyring` backends, so a host with no OS keyring (e.g. a headless Linux container) can still persist SSO/OIDC tokens via `PYTHON_KEYRING_BACKEND`.
diff --git a/cloudsmith_cli/data/VERSION b/cloudsmith_cli/data/VERSION
index 57807d6d..a6c2798a 100644
--- a/cloudsmith_cli/data/VERSION
+++ b/cloudsmith_cli/data/VERSION
@@ -1 +1 @@
-1.22.0
+1.23.0