diff --git a/CHANGELOG.md b/CHANGELOG.md
new file mode 100644
index 0000000..b5083ab
--- /dev/null
+++ b/CHANGELOG.md
@@ -0,0 +1,31 @@
+# Changelog
+
+All notable changes to this project will be documented in this file. See [docs/RELEASING.md](docs/RELEASING.md) for how to update this changelog.
+
+## 1.0.0 (2026-06-29)
+
+### Features
+
+* Add engine-strict=true to .npmrc
+* feat: Add schema validation for RabbitMQ messages with Zod
+* feat: add renovate.json for automated dependency updates
+
+### Bug Fixes
+
+* fix
+* resolve timezone confusion
+* fix: resolve linting errors and clean up types
+* fix: enable case-sensitive routing on Express app and router
+* fix: remove stale .env.example entries and align S3 env vars with code
+* fix: harden security headers and webhook body handling
+
+### Chores
+
+* chore(deps): update pnpm-lock.yaml to resolve overrides mismatch
+* chore(deps): update pnpm-lock.yaml to resolve overrides mismatch
+* chore(deps): add renovate.json for automated dependency updates
+
+### Security
+
+* security: remove sensitive architectural documents
+* security: Block GraphQL endpoint and introspection attempts (#400)
diff --git a/docs/RELEASING.md b/docs/RELEASING.md
new file mode 100644
index 0000000..44d67f5
--- /dev/null
+++ b/docs/RELEASING.md
@@ -0,0 +1,33 @@
+# Releasing
+
+This document explains how to generate and update the changelog.
+
+## Prerequisites
+
+Ensure you have installed all dependencies:
+
+```bash
+pnpm install
+```
+
+## Generating Changelog
+
+### Initial Generation
+
+To generate the changelog for the first time from all existing git history:
+
+```bash
+pnpm run changelog
+```
+
+### Updating Changelog
+
+To update the changelog with new commits since the last version:
+
+```bash
+pnpm run changelog:update
+```
+
+## Commit Convention
+
+This project follows the [Conventional Commits](https://www.conventionalcommits.org/) specification.
diff --git a/package.json b/package.json
index 066d08f..b7faa83 100644
--- a/package.json
+++ b/package.json
@@ -37,6 +37,8 @@
     "backfill:kyc-encryption": "ts-node --transpile-only scripts/backfillKycEncryption.ts",
     "stellar:create-wallet": "ts-node --transpile-only scripts/create-stellar-wallet.ts",
     "compute:basket-weights": "ts-node --transpile-only scripts/compute-basket-weights.ts",
+    "changelog": "conventional-changelog -p angular -i CHANGELOG.md -s -r 0",
+    "changelog:update": "conventional-changelog -p angular -i CHANGELOG.md -s",
     "postinstall": "prisma generate"
   },
   "keywords": [
@@ -112,6 +114,8 @@
     "@types/swagger-ui-express": "^4.1.6",
     "@typescript-eslint/eslint-plugin": "^8.59.0",
     "@typescript-eslint/parser": "^8.59.0",
+    "conventional-changelog": "^6.0.0",
+    "conventional-changelog-cli": "^5.0.0",
     "eslint": "^8.56.0",
     "eslint-config-prettier": "^9.1.0",
     "eslint-plugin-prettier": "^5.1.3",