diff --git a/CHANGELOG.md b/CHANGELOG.md
index 25a0b57..bde52fc 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,5 +1,21 @@
 # Changelog
 
+## [v3.1.3](https://github.com/shamaton/msgpack/compare/v3.1.2...v3.1.3) - 2026-06-22
+
+- Potential fix for code scanning alert no. 1: Workflow does not contain permissions by @shamaton in https://github.com/shamaton/msgpack/pull/75
+- Bump actions/upload-artifact from 5.0.0 to 7.0.1 by @dependabot[bot] in https://github.com/shamaton/msgpack/pull/77
+- Bump securego/gosec from de65614d10a6b84029e3e1215567b8ce7e490f23 to 6351b0c6fcc7d75acb230a9be7f9047aada322ae by @dependabot[bot] in https://github.com/shamaton/msgpack/pull/78
+- Bump actions/download-artifact from 5.0.0 to 8.0.1 by @dependabot[bot] in https://github.com/shamaton/msgpack/pull/79
+- ci: update some workflows by @shamaton in https://github.com/shamaton/msgpack/pull/84
+- Bump actions/checkout from 6.0.2 to 6.0.3 by @dependabot[bot] in https://github.com/shamaton/msgpack/pull/80
+- Bump Songmu/tagpr from 1.19.0 to 1.20.0 by @dependabot[bot] in https://github.com/shamaton/msgpack/pull/81
+- Bump securego/gosec from 6351b0c6fcc7d75acb230a9be7f9047aada322ae to 9addc97cefc9460a114e3c36f536b935da3b98c9 by @dependabot[bot] in https://github.com/shamaton/msgpack/pull/85
+- chore: update README by @shamaton in https://github.com/shamaton/msgpack/pull/86
+- Bump securego/gosec from 9addc97cefc9460a114e3c36f536b935da3b98c9 to f1c81de5fcdf7b466b229fb24ca02d1a8406dd09 by @dependabot[bot] in https://github.com/shamaton/msgpack/pull/87
+- Bump codecov/codecov-action from 6.0.1 to 7.0.0 by @dependabot[bot] in https://github.com/shamaton/msgpack/pull/88
+- Bump securego/gosec from f1c81de5fcdf7b466b229fb24ca02d1a8406dd09 to caf8857bbd3276599d0176b0528e9712bb0b5bec by @dependabot[bot] in https://github.com/shamaton/msgpack/pull/89
+- Bump actions/checkout from 6.0.3 to 7.0.0 by @dependabot[bot] in https://github.com/shamaton/msgpack/pull/90
+
 ## [v3.1.2](https://github.com/shamaton/msgpack/compare/v3.1.1...v3.1.2) - 2026-05-19
 - chore: clean up and pin GitHub Actions workflows by @shamaton in https://github.com/shamaton/msgpack/pull/71
 - Bump codecov/codecov-action from 6.0.0 to 6.0.1 by @dependabot[bot] in https://github.com/shamaton/msgpack/pull/73