diff --git a/CHANGELOG.md b/CHANGELOG.md
new file mode 100644
index 000000000..a2e6ab259
--- /dev/null
+++ b/CHANGELOG.md
@@ -0,0 +1,8 @@
+<a name="0.24.0"></a>
+## 0.24.0 (2014-10-20)
+
+
+#### Features
+
+* **server:** set HSTS header for 180 days ([d43accb9](http://github.com/mozilla/fxa-oauth-server/commit/d43accb9d7749a216840ba0cf51861becf974a81))
+
diff --git a/npm-shrinkwrap.json b/npm-shrinkwrap.json
index 2ad4c88ce..daab36b6b 100644
--- a/npm-shrinkwrap.json
+++ b/npm-shrinkwrap.json
@@ -1,6 +1,6 @@
 {
   "name": "fxa-oauth-server",
-  "version": "0.23.0",
+  "version": "0.24.0",
   "dependencies": {
     "URIjs": {
       "version": "1.14.1",
diff --git a/package.json b/package.json
index 4abe604c4..2f49f03ea 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "fxa-oauth-server",
-  "version": "0.23.0",
+  "version": "0.24.0",
   "private": true,
   "description": "Firefox Accounts OAuth2 server.",
   "main": "index.js",