diff --git a/CHANGELOG.md b/CHANGELOG.md
index c67ca1c5d..53c01689f 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,6 +1,23 @@
 # CHANGELOG
 
-## v0.20.2-dev
+## v0.20.2 (2020-02-03)
+
+### Enhancements
+
+* Add `--output` option to `mix hex.package fetch` task
+* Add `cacerts_path` configuration for custom CA certificate files
+* Improve output in `mix hex.publish` to make it more clear to what repository you are publishing
+* Explain red colors in hex.outdated
+
+### Bug fixes
+
+* Fix HTTP timeout config
+* Do not allow creating empty packages
+
+### Security fixes
+
+* Fix for directory traversal vulnerability for symlinks in tarballs
+* Update package checksum to include the entire tarball instead of specific files inside it
 
 ## v0.20.1 (2019-06-10)
 
diff --git a/mix.exs b/mix.exs
index d6e29e629..9f38deb98 100644
--- a/mix.exs
+++ b/mix.exs
@@ -1,7 +1,7 @@
 defmodule Hex.MixProject do
   use Mix.Project
 
-  @version "0.20.2-dev"
+  @version "0.20.2"
 
   {:ok, system_version} = Version.parse(System.version())
   @elixir_version {system_version.major, system_version.minor, system_version.patch}