diff --git a/Cargo.lock b/Cargo.lock
index 85c1dd23..0a2cbbb4 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -2892,7 +2892,7 @@ checksum = "69cdb34c158ceb288df11e18b4bd39de994f6657d83847bdffdbd7f346754b0f"
 
 [[package]]
 name = "radicle"
-version = "0.22.1"
+version = "0.23.0"
 dependencies = [
  "amplify",
  "base64 0.21.7",
diff --git a/Cargo.toml b/Cargo.toml
index 1cbe4f61..65f35eea 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -44,7 +44,7 @@ pretty_assertions = "1.3.0"
 proptest = "1.9"
 qcheck = { version = "1", default-features = false }
 qcheck-macros = { version = "1", default-features = false }
-radicle = { version = "0.22", path = "crates/radicle" }
+radicle = { version = "0.23", path = "crates/radicle" }
 radicle-cli = { version = "0.19", path = "crates/radicle-cli" }
 radicle-cli-test = { path = "crates/radicle-cli-test" }
 radicle-cob = { version = "0.19", path = "crates/radicle-cob" }
diff --git a/crates/radicle/CHANGELOG.md b/crates/radicle/CHANGELOG.md
index 85f12f17..28daee83 100644
--- a/crates/radicle/CHANGELOG.md
+++ b/crates/radicle/CHANGELOG.md
@@ -15,6 +15,54 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ### Security
 
+## 0.23.0
+
+### Added
+
+- `radicle::node::config::Config` has a new required `fetch` field. Existing
+  struct literals must be updated to include this field.
+- `radicle::node::command::Command::Fetch` variant has a new
+  `signed_references_minimum_feature_level` field.
+- `radicle::storage::refs::sigrefs::write::Update::Changed` variant has a new
+  `level` field.
+- `radicle::storage::refs::sigrefs::write::Update::Unchanged` variant has a new
+  `verified` field.
+- `radicle::storage::git::Validation` has a new `InsufficientFeatureLevel`
+  variant.
+- `radicle::storage::SignRepository` trait has a new required method
+  `force_sign_refs`.
+
+### Changed
+
+- `radicle::storage::refs::sigrefs::write::SignedRefsWriter::new` now takes 5
+  parameters instead of 4.
+- `radicle::node::Handle::fetch` now takes 5 parameters instead of 4.
+
+### Removed
+
+- `radicle::storage::refs::sigrefs::write::Update::Unchanged` fields `commit`,
+  `refs`, and `signature` were removed.
+- `radicle::storage::refs::sigrefs::read::error::Verify::MissingIdentity`
+  variant was removed.
+- `radicle::storage::refs::sigrefs::write::error::Head` variants `Blob`, `Refs`,
+  `Signature`, and `MissingPath` were removed.
+- `radicle::storage::refs::sigrefs::git::committer` function was removed.
+- `radicle::storage::refs::sigrefs::git::Committer::from_env_or_else` and
+  `Committer::from_env` methods were removed.
+- `radicle::storage::refs::sigrefs::read::VerifiedCommit` methods `id`,
+  `signature`, `into_refs`, and `parent` were removed.
+- `radicle::storage::refs::RefsAt::load` method was removed.
+- `radicle::storage::refs::sigrefs::write::SignedRefsWriter::write` method was
+  removed.
+- `radicle::storage::refs::sigrefs::read::error::MissingIdentity` struct was
+  removed.
+- `radicle::storage::refs::SignedRefsAt` struct was removed.
+
+### Security
+
+- Loading `radicle::storage::refs::SignedRefs` from a repository protects
+  against replay attacks, graft attacks, and downgrade attacks.
+
 ## 0.22.0
 
 ### Added
diff --git a/crates/radicle/Cargo.toml b/crates/radicle/Cargo.toml
index 696d3b30..b84ca436 100644
--- a/crates/radicle/Cargo.toml
+++ b/crates/radicle/Cargo.toml
@@ -4,7 +4,7 @@ description = "Radicle standard library"
 homepage.workspace = true
 repository.workspace = true
 license.workspace = true
-version = "0.22.1"
+version = "0.23.0"
 authors = ["cloudhead <cloudhead@radicle.xyz>"]
 edition.workspace = true
 rust-version.workspace = true