diff --git a/.changeset/good-jars-confess.md b/.changeset/good-jars-confess.md
deleted file mode 100644
index b4cc4983..00000000
--- a/.changeset/good-jars-confess.md
+++ /dev/null
@@ -1,5 +0,0 @@
----
-"@common-fate/terraform-aws-common-fate-deployment": patch
----
-
-Expose variables single_nat_gateway and one_nat_gateway_per_az on the vpc module to enable deploying with a single nat gateway instance.
diff --git a/.changeset/hot-turtles-grin.md b/.changeset/hot-turtles-grin.md
deleted file mode 100644
index 18525b8d..00000000
--- a/.changeset/hot-turtles-grin.md
+++ /dev/null
@@ -1,5 +0,0 @@
----
-"@common-fate/terraform-aws-common-fate-deployment": minor
----
-
-Adds support for Okta integration configuration
diff --git a/.changeset/small-panthers-scream.md b/.changeset/small-panthers-scream.md
deleted file mode 100644
index 2af6e742..00000000
--- a/.changeset/small-panthers-scream.md
+++ /dev/null
@@ -1,13 +0,0 @@
----
-"@common-fate/terraform-aws-common-fate-deployment": minor
----
-
-Updates the bundled Common Fate application release to be v2.1.0:
-
-Adds support for Okta integration, adding user and group syncing and an Okta group provisioner
-
-Update the provisioner configuration check to warn instead of panic when no provisioner types are configured
-New users will have now have their identity linked with any idp integration upon logging in
-Fix cleanup routine to remove closed requests that never started
-Add expires timing to grants on request detail page
-Prevent an internal server error when creating availability specs before resource syncing has run
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 5d74d56d..3e2f4fb7 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,5 +1,24 @@
 # @common-fate/terraform-aws-common-fate-deployment
 
+## 1.17.0
+
+### Minor Changes
+
+- ca94e45: Adds support for Okta integration configuration
+- 778160b: Updates the bundled Common Fate application release to be v2.1.0:
+
+  Adds support for Okta integration, adding user and group syncing and an Okta group provisioner
+
+  Update the provisioner configuration check to warn instead of panic when no provisioner types are configured
+  New users will have now have their identity linked with any idp integration upon logging in
+  Fix cleanup routine to remove closed requests that never started
+  Add expires timing to grants on request detail page
+  Prevent an internal server error when creating availability specs before resource syncing has run
+
+### Patch Changes
+
+- ec5bb85: Expose variables single_nat_gateway and one_nat_gateway_per_az on the vpc module to enable deploying with a single nat gateway instance.
+
 ## 1.16.2
 
 ### Patch Changes
diff --git a/package.json b/package.json
index 142f9bc5..a203dce1 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@common-fate/terraform-aws-common-fate-deployment",
-  "version": "1.16.2",
+  "version": "1.17.0",
   "description": "",
   "main": "index.js",
   "keywords": [],