diff --git a/CHANGELOG.md b/CHANGELOG.md
index 5be5de7..6820f07 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,5 +1,8 @@
 # Changelog
 
+## 2.9.7 - 2026-06-10
+fix: Use random nonce per call in AES-GCM onboarding signature
+
 ## 2.9.6 - 2025-02-24
 feat: Added support for access token based authentication mechanism
 - Added oauth APIs (getAuthURL, getAccessToken, refreshToken, revokeToken)
diff --git a/package-lock.json b/package-lock.json
index 7daa789..5587fc6 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -1,12 +1,12 @@
 {
   "name": "razorpay",
-  "version": "2.9.4",
+  "version": "2.9.7",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "razorpay",
-      "version": "2.9.4",
+      "version": "2.9.7",
       "license": "MIT",
       "dependencies": {
         "axios": "^1.6.8"
diff --git a/package.json b/package.json
index 0770d0c..7f5a641 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "razorpay",
-  "version": "2.9.6",
+  "version": "2.9.7",
   "description": "Official Node SDK for Razorpay API",
   "main": "dist/razorpay",
   "typings": "dist/razorpay",