diff --git a/CHANGES.rst b/CHANGES.rst
index 2126470..4e7514b 100644
--- a/CHANGES.rst
+++ b/CHANGES.rst
@@ -8,6 +8,12 @@
 Changes
 =======
 
+Version 1.2.1 (released 2020-05-08)
+
+- The CSRF Middleware is now by default disabled.
+- The ``CSRF_SECRET_SALT`` now defaults to ``invenio-csrf-token``.
+- Added a new configuration variable: ``CSRF_FORCE_SECURE_REFERER``.
+
 Version 1.2.0 (released 2020-03-10)
 
 - Centralize dependency management via Invenio-Base.
diff --git a/invenio_rest/version.py b/invenio_rest/version.py
index 09afc98..dc10ef4 100644
--- a/invenio_rest/version.py
+++ b/invenio_rest/version.py
@@ -14,4 +14,4 @@
 
 from __future__ import absolute_import, print_function
 
-__version__ = '1.2.0'
+__version__ = '1.2.1'