diff --git a/CHANGELOG.md b/CHANGELOG.md
index d5effbc39..5a019c5f6 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -2,6 +2,13 @@
 
 All notable changes to this project will be documented in this file. See [standard-version](https://github.com/conventional-changelog/standard-version) for commit guidelines.
 
+## [8.4.2](https://github.com/panva/node-oidc-provider/compare/v8.4.1...v8.4.2) (2023-12-02)
+
+
+### Fixes
+
+* reject client JSON Web Key Set `null` value ([#1237](https://github.com/panva/node-oidc-provider/issues/1237)) ([cce6d43](https://github.com/panva/node-oidc-provider/commit/cce6d43535da72cd244b18d8a42a8dbee5f0f955))
+
 ## [8.4.1](https://github.com/panva/node-oidc-provider/compare/v8.4.0...v8.4.1) (2023-10-25)
 
 ## [8.4.0](https://github.com/panva/node-oidc-provider/compare/v8.3.2...v8.4.0) (2023-09-08)
diff --git a/package-lock.json b/package-lock.json
index ef5350e47..d4307e7fb 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -1,12 +1,12 @@
 {
   "name": "oidc-provider",
-  "version": "8.4.1",
+  "version": "8.4.2",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "oidc-provider",
-      "version": "8.4.1",
+      "version": "8.4.2",
       "license": "MIT",
       "dependencies": {
         "@koa/cors": "^4.0.0",
diff --git a/package.json b/package.json
index 8eb6d637d..dca3eaf6e 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "oidc-provider",
-  "version": "8.4.1",
+  "version": "8.4.2",
   "description": "OAuth 2.0 Authorization Server implementation for Node.js with OpenID Connect",
   "keywords": [
     "appauth",