diff --git a/CHANGELOG.md b/CHANGELOG.md
index fd34fd5..a80ed46 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,3 +1,8 @@
+# 2.2.8 (31 Jul 2024)
+
+- Updated `braces` to patch security vulnerability
+- Updated `ws` to patch security vulnerability
+
 # 2.2.7 (16 Apr 2024)
 
 - Removed `babel-plugin-transform-class-properties` to patch security vulnerability ([#17](https://github.com/xapijs/xapi/security/dependabot/17))
diff --git a/package-lock.json b/package-lock.json
index ebc4dcb..fe39160 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -1,12 +1,12 @@
 {
   "name": "@xapi/xapi",
-  "version": "2.2.7",
+  "version": "2.2.8",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@xapi/xapi",
-      "version": "2.2.7",
+      "version": "2.2.8",
       "license": "MIT",
       "dependencies": {
         "axios": "^1.6.0"
diff --git a/package.json b/package.json
index 46e787e..dbbba8a 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@xapi/xapi",
-  "version": "2.2.7",
+  "version": "2.2.8",
   "description": "Communicate over xAPI using JavaScript.",
   "main": "dist/XAPI.cjs.js",
   "module": "dist/XAPI.esm.js",