diff --git a/CHANGELOG.md b/CHANGELOG.md
index 3e6fd81..7c3e0f2 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -6,6 +6,22 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [4.2.3] - 2023-10-05
+### Added
+- Themeable profile pages
+- Apps page
+### Changed
+- Update doipjs to 1.2.5
+- Make Dicebear API domain configurable
+### Fixed
+- Catch errors potentially thrown by function
+- Update JSON schemas
+- Icon URL generation in profile view
+### Notes
+- ASP profiles use the Dicebear API to generate avatars. By default, Keyoxide
+uses the official api.dicebear.com instance. To use a custom Dicebear instance,
+set the DICEBEAR_API_HOSTNAME environment variable to its hostname.
+
 ## [4.2.2] - 2023-10-03
 ### Changed
 - Update doipjs to 1.2.2
diff --git a/package.json b/package.json
index 2b41eb2..a49bbeb 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "keyoxide-web",
-  "version": "4.2.2",
+  "version": "4.2.3",
   "description": "Verifying online identity with cryptography",
   "main": "./src/index.js",
   "type": "module",