diff --git a/doc/CHANGELOG.md b/doc/CHANGELOG.md
index 56b511a..668609c 100644
--- a/doc/CHANGELOG.md
+++ b/doc/CHANGELOG.md
@@ -1,3 +1,11 @@
+## v3.20.00 - 2025/03/25
+- chg: deprecate Ubuntu 18.04, up required perl version to v5.26
+- enh: ensure JSON streams are purely us-ascii
+- fix: httpproxy: allow binary data to be passed through unmodified
+- chore: dockerhub: remove i386 build, no longer supported by yubico-piv-checker builds
+- chore: fix yubico-piv-checker package name since 1.0.2
+- chore: workflows: allow manual launch of distro tests
+
 ## v3.19.01 - 2025/03/04
 - feat: httpproxy: optional support for plain http on egress
 - fix: selfPlaySession: warn in syslog properly
diff --git a/doc/release-notes/v3.20.00.md b/doc/release-notes/v3.20.00.md
new file mode 100644
index 0000000..dde075d
--- /dev/null
+++ b/doc/release-notes/v3.20.00.md
@@ -0,0 +1,25 @@
+# :zap: Security
+
+- No security fixes since previous release
+- Oldest release with no known [security issue](https://github.com/ovh/the-bastion/security/advisories) is `v3.14.15` (2023-11-08)
+
+# :bulb: Highlights
+
+This release drops official support for Ubuntu 18.04. Consequently, we upped the minimum required version of Perl to v5.26 (released in 2017).
+
+The main change is the support of arbitrary binary data passed through the HTTPS proxy, hence if you use it, restarting the daemon after the upgrade is important.
+
+A more complete list of changes can be found below, for an exhaustive (and boring) list, please refer to the [commit log](https://github.com/ovh/the-bastion/compare/v3.19.01...v3.20.00).
+
+# :pushpin: Changes
+- chg: deprecate Ubuntu 18.04, up required perl version to v5.26
+- enh: ensure JSON streams are purely us-ascii
+- fix: httpproxy: allow binary data to be passed through unmodified
+- chore: dockerhub: remove i386 build, no longer supported by yubico-piv-checker builds
+- chore: fix yubico-piv-checker package name since 1.0.2
+- chore: workflows: allow manual launch of distro tests
+
+# :fast_forward: Upgrading
+
+- [General upgrade instructions](https://ovh.github.io/the-bastion/installation/upgrading.html)
+- [Specific upgrade instructions for v3.20.00](https://ovh.github.io/the-bastion/installation/upgrading.html#v3-20-00-2025-03-25)
diff --git a/doc/sphinx/installation/upgrading.rst b/doc/sphinx/installation/upgrading.rst
index a328844..162be03 100644
--- a/doc/sphinx/installation/upgrading.rst
+++ b/doc/sphinx/installation/upgrading.rst
@@ -27,6 +27,12 @@ See the ``--help`` for a more fine-grained upgrade path if needed.
 Version-specific upgrade instructions
 =====================================
 
+v3.20.00 - 2025/03/25
+*********************
+
+Support of Ubuntu 18.04 has been dropped. The minimum required Perl version is now v5.26,
+which has been released in 2017.
+
 v3.19.01 - 2025/03/04
 *********************
 
diff --git a/lib/perl/OVH/Bastion.pm b/lib/perl/OVH/Bastion.pm
index e257295..71769a1 100644
--- a/lib/perl/OVH/Bastion.pm
+++ b/lib/perl/OVH/Bastion.pm
@@ -5,7 +5,7 @@ use common::sense;
 use Fcntl;
 use POSIX qw(strftime);
 
-our $VERSION = '3.19.01';
+our $VERSION = '3.20.00';
 
 BEGIN {
     # only used by the handler below