diff --git a/CHANGELOG.md b/CHANGELOG.md
index 435d5ea..bd91835 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,3 +1,22 @@
+# [1.15.0](https://github.com/asepharyana/zesdex/compare/v1.14.0...v1.15.0) (2026-07-17)
+
+
+### Bug Fixes
+
+* **cms:** perbaiki serde default hive_mind_node_timeout_ms & toleransi parse gagal di Settings ([6d41ffc](https://github.com/asepharyana/zesdex/commit/6d41ffc587f6f8de5bb4757c7eb8d69077831057))
+* **cms:** satukan ChatMessage/Role Conversation dengan tipe kanonik zesdex-entities ([b272858](https://github.com/asepharyana/zesdex/commit/b272858edbe36af0b2eca119ff5b132de8dadce9))
+* **iam:** redirect_uri dinamis + validasi CSRF state di OAuthServiceImpl ([be278f8](https://github.com/asepharyana/zesdex/commit/be278f8b1c2bc1295368e49c38622ef2bc3ed9ee))
+* **iam:** set permission 0600 pada file token OAuth ([f2d97fb](https://github.com/asepharyana/zesdex/commit/f2d97fb17dcf4f52123da89532d7964ed8f8124c))
+* **middleware:** jangan percaya header X-Forwarded-For/X-Real-IP secara default di rate limiter ([4dc4f80](https://github.com/asepharyana/zesdex/commit/4dc4f80fa344d894c2ce62f75d239847cd13001a))
+
+
+### Features
+
+* **cms:** implement RewindBlobRepository for managing binary blobs ([22dd6fd](https://github.com/asepharyana/zesdex/commit/22dd6fdda7d0c8eabfce296bbad53587204c69fa))
+* **iam:** implementasikan FileSystemSessionLockRepository (sebelumnya belum ada implementasi) ([ff6a749](https://github.com/asepharyana/zesdex/commit/ff6a749c1149d890173922fbff76facef50a93b0))
+* **iam:** port LoopbackServer OAuth callback listener dari zesdex-backend ([910aa5e](https://github.com/asepharyana/zesdex/commit/910aa5e071911f158609c4dd8985f776d8d9235f))
+* **iam:** tambahkan CSPRNG (OsRng) untuk token state/PKCE ([5ede65f](https://github.com/asepharyana/zesdex/commit/5ede65f454b08303f588754a208dca0c37d3ce34))
+
 # [1.14.0](https://github.com/asepharyana/zesdex/compare/v1.13.0...v1.14.0) (2026-07-16)
 
 
diff --git a/Cargo.lock b/Cargo.lock
index e9d4a73..d285478 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -4671,7 +4671,7 @@ dependencies = [
 
 [[package]]
 name = "zesdex-backend"
-version = "1.13.0"
+version = "1.15.0"
 dependencies = [
  "anyhow",
  "base64",
@@ -4721,7 +4721,7 @@ dependencies = [
 
 [[package]]
 name = "zesdex-cms"
-version = "1.13.0"
+version = "1.15.0"
 dependencies = [
  "anyhow",
  "chrono",
@@ -4737,7 +4737,7 @@ dependencies = [
 
 [[package]]
 name = "zesdex-entities"
-version = "1.13.0"
+version = "1.15.0"
 dependencies = [
  "anyhow",
  "base64",
@@ -4756,7 +4756,7 @@ dependencies = [
 
 [[package]]
 name = "zesdex-iam"
-version = "1.13.0"
+version = "1.15.0"
 dependencies = [
  "anyhow",
  "base64",
@@ -4777,7 +4777,7 @@ dependencies = [
 
 [[package]]
 name = "zesdex-infra"
-version = "1.13.0"
+version = "1.15.0"
 dependencies = [
  "anyhow",
  "argon2",
@@ -4800,7 +4800,7 @@ dependencies = [
 
 [[package]]
 name = "zesdex-ipc"
-version = "1.13.0"
+version = "1.15.0"
 dependencies = [
  "anyhow",
  "serde",
@@ -4811,7 +4811,7 @@ dependencies = [
 
 [[package]]
 name = "zesdex-middleware"
-version = "1.13.0"
+version = "1.15.0"
 dependencies = [
  "anyhow",
  "axum",
@@ -4826,7 +4826,7 @@ dependencies = [
 
 [[package]]
 name = "zesdex-utils"
-version = "1.13.0"
+version = "1.15.0"
 dependencies = [
  "anyhow",
  "base64",
diff --git a/Cargo.toml b/Cargo.toml
index 1a31b31..9f567a9 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -12,7 +12,7 @@ members = [
 ]
 
 [workspace.package]
-version = "1.13.0"
+version = "1.15.0"
 edition = "2021"
 authors = ["asepharyana <superaseph@gmail.com>"]