diff --git a/cli/CHANGELOG.md b/cli/CHANGELOG.md
index 6965aaa5..c1198531 100644
--- a/cli/CHANGELOG.md
+++ b/cli/CHANGELOG.md
@@ -1,6 +1,8 @@
 # Mops CLI Changelog
 
 ## Next
+
+## 2.12.3
 - Fix `mops install --lock update` silently no-op'ing on a corrupt lockfile (#515)
 - `mops publish` no longer rejects unknown `mops.toml` sections, `package.*` keys, or `requirements.*` entries — these typo guards were the only place in the CLI that complained about unknown keys, drifted from the docs/types, and blocked publish on harmless local-only config like `[moc]`, `[canisters]`, `[build]`, and `[lint]` (#512)
 
diff --git a/cli/package-lock.json b/cli/package-lock.json
index 8d0546d8..0203815d 100644
--- a/cli/package-lock.json
+++ b/cli/package-lock.json
@@ -1,12 +1,12 @@
 {
   "name": "ic-mops",
-  "version": "2.12.2",
+  "version": "2.12.3",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "ic-mops",
-      "version": "2.12.2",
+      "version": "2.12.3",
       "license": "MIT",
       "dependencies": {
         "@iarna/toml": "2.2.5",
diff --git a/cli/package.json b/cli/package.json
index e2d9ff66..a6b1f1ec 100644
--- a/cli/package.json
+++ b/cli/package.json
@@ -1,6 +1,6 @@
 {
   "name": "ic-mops",
-  "version": "2.12.2",
+  "version": "2.12.3",
   "type": "module",
   "bin": {
     "mops": "dist/bin/mops.js",