diff --git a/CHANGELOG.md b/CHANGELOG.md
index b0c006753c..1ec27ddbeb 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,3 +1,22 @@
+<a name="0.23.3"></a>
+## 0.23.3 (2026-06-18)
+
+
+#### Chore
+
+*   rm the fxa_client_id settings that's no longer used (#2400) ([c530cd4c](https://github.com/mozilla-services/syncstorage-rs/commit/c530cd4c390882d451c16c6b798d20e66c709754))
+*   tag 0.23.2 (#2399) ([1aee7bd9](https://github.com/mozilla-services/syncstorage-rs/commit/1aee7bd942324313607b5d9100673386515c84b3))
+
+#### Features
+
+*   kill get_collection's redundant extract_resource call (#2389) ([1a703e24](https://github.com/mozilla-services/syncstorage-rs/commit/1a703e2427cd4194c83dc60f3086fb6e1eead19b))
+
+#### Bug Fixes
+
+*   do not validate `exp` on FxA event tokens (#2402) ([14512f11](https://github.com/mozilla-services/syncstorage-rs/commit/14512f11f046b8de0be54605746c7647ef35def7))
+
+
+
 <a name="0.23.2"></a>
 ## 0.23.2 (2026-06-17)
 
diff --git a/Cargo.lock b/Cargo.lock
index d1fa056efb..c8f9eb03e2 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -1535,7 +1535,7 @@ checksum = "e629b9b98ef3dd8afe6ca2bd0f89306cec16d43d907889945bc5d6687f2f13c7"
 
 [[package]]
 name = "glean"
-version = "0.23.2"
+version = "0.23.3"
 dependencies = [
  "chrono",
  "serde",
@@ -4196,7 +4196,7 @@ dependencies = [
 
 [[package]]
 name = "syncserver"
-version = "0.23.2"
+version = "0.23.3"
 dependencies = [
  "actix-cors",
  "actix-http",
@@ -4253,7 +4253,7 @@ dependencies = [
 
 [[package]]
 name = "syncserver-common"
-version = "0.23.2"
+version = "0.23.3"
 dependencies = [
  "actix-web",
  "backtrace",
@@ -4272,7 +4272,7 @@ dependencies = [
 
 [[package]]
 name = "syncserver-db-common"
-version = "0.23.2"
+version = "0.23.3"
 dependencies = [
  "backtrace",
  "deadpool",
@@ -4288,7 +4288,7 @@ dependencies = [
 
 [[package]]
 name = "syncserver-settings"
-version = "0.23.2"
+version = "0.23.3"
 dependencies = [
  "config",
  "num_cpus",
@@ -4303,7 +4303,7 @@ dependencies = [
 
 [[package]]
 name = "syncstorage-db"
-version = "0.23.2"
+version = "0.23.3"
 dependencies = [
  "async-trait",
  "deadpool",
@@ -4325,7 +4325,7 @@ dependencies = [
 
 [[package]]
 name = "syncstorage-db-common"
-version = "0.23.2"
+version = "0.23.3"
 dependencies = [
  "async-trait",
  "backtrace",
@@ -4344,7 +4344,7 @@ dependencies = [
 
 [[package]]
 name = "syncstorage-mysql"
-version = "0.23.2"
+version = "0.23.3"
 dependencies = [
  "async-trait",
  "base64",
@@ -4365,7 +4365,7 @@ dependencies = [
 
 [[package]]
 name = "syncstorage-postgres"
-version = "0.23.2"
+version = "0.23.3"
 dependencies = [
  "async-trait",
  "chrono",
@@ -4384,7 +4384,7 @@ dependencies = [
 
 [[package]]
 name = "syncstorage-settings"
-version = "0.23.2"
+version = "0.23.3"
 dependencies = [
  "rand 0.10.1",
  "serde",
@@ -4393,7 +4393,7 @@ dependencies = [
 
 [[package]]
 name = "syncstorage-spanner"
-version = "0.23.2"
+version = "0.23.3"
 dependencies = [
  "actix-web",
  "async-trait",
@@ -4605,7 +4605,7 @@ checksum = "1f3ccbac311fea05f86f61904b462b55fb3df8837a366dfc601a0161d0532f20"
 
 [[package]]
 name = "tokenserver-auth"
-version = "0.23.2"
+version = "0.23.3"
 dependencies = [
  "async-trait",
  "base64",
@@ -4631,7 +4631,7 @@ dependencies = [
 
 [[package]]
 name = "tokenserver-common"
-version = "0.23.2"
+version = "0.23.3"
 dependencies = [
  "actix-web",
  "backtrace",
@@ -4644,7 +4644,7 @@ dependencies = [
 
 [[package]]
 name = "tokenserver-db"
-version = "0.23.2"
+version = "0.23.3"
 dependencies = [
  "async-trait",
  "chrono",
@@ -4664,7 +4664,7 @@ dependencies = [
 
 [[package]]
 name = "tokenserver-db-common"
-version = "0.23.2"
+version = "0.23.3"
 dependencies = [
  "async-trait",
  "backtrace",
@@ -4684,7 +4684,7 @@ dependencies = [
 
 [[package]]
 name = "tokenserver-mysql"
-version = "0.23.2"
+version = "0.23.3"
 dependencies = [
  "async-trait",
  "chrono",
@@ -4703,7 +4703,7 @@ dependencies = [
 
 [[package]]
 name = "tokenserver-postgres"
-version = "0.23.2"
+version = "0.23.3"
 dependencies = [
  "async-trait",
  "chrono",
@@ -4722,7 +4722,7 @@ dependencies = [
 
 [[package]]
 name = "tokenserver-settings"
-version = "0.23.2"
+version = "0.23.3"
 dependencies = [
  "jsonwebtoken",
  "serde",
diff --git a/Cargo.toml b/Cargo.toml
index 7802ff1158..0188ea0b04 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -23,7 +23,7 @@ members = [
 default-members = ["syncserver"]
 
 [workspace.package]
-version = "0.23.2"
+version = "0.23.3"
 authors = [
   "Mozilla Sync Backend Engineering <sync-backend@mozilla.com",
 ]