globus
diff --git a/‎changelog.adoc
+31 b/‎changelog.adoc
+31
diff --git a/‎changelog.d/20240129_181132_sirosen_improve_jwt_clock_skew_tolerance.md
-5 b/‎changelog.d/20240129_181132_sirosen_improve_jwt_clock_skew_tolerance.md
-5
diff --git a/‎changelog.d/20240206_161457_derek_gcs_endpoint_role_sc_28588.md
-10 b/‎changelog.d/20240206_161457_derek_gcs_endpoint_role_sc_28588.md
-10
diff --git a/‎changelog.d/20240208_162126_sirosen_flow_create_subscription_id.md
-4 b/‎changelog.d/20240208_162126_sirosen_flow_create_subscription_id.md
-4
diff --git a/‎changelog.d/20240214_225218_sirosen_fix_json_error_presentation.md
-5 b/‎changelog.d/20240214_225218_sirosen_fix_json_error_presentation.md
-5
diff --git a/‎changelog.d/20240216_122016_derek_gcs_endpoint_update_sc_28586.md
-6 b/‎changelog.d/20240216_122016_derek_gcs_endpoint_update_sc_28586.md
-6
diff --git a/‎src/globus_cli/version.py
+1-1 b/‎src/globus_cli/version.py
+1-1
@@ -2,6 +2,37 @@
 
 // scriv-insert-here
 
+== 3.25.0 (2024-02-19)
+
+Enhancements:
+
+* Added gcs endpoint role management commands:
+
+** `globus gcs endpoint role create`
+** `globus gcs endpoint role list`
+** `globus gcs endpoint role show`
+** `globus gcs endpoint role delete`
+
+* Introduced principal urn resolution as a common util function
+
+* Add `--subscription-id` to `globus flows create` options, and add
+  `Subscription ID` to `flows` command outputs
+
+* `--format=JSON` output now offers greater detail when API errors are
+  encountered with JSON bodies. Rather than re-encoding error details, the
+  original error body is now shown in these cases.
+
+* Added support for GCSv5 endpoint displaying & updating:
+
+** `globus gcs endpoint show ENDPOINT_ID`
+** `globus gcs endpoint update ENDPOINT_ID`
+
+Other:
+
+* `globus login` and related commands are now more tolerant of clock drift, and
+  will emit a clearer error message when clock drift is severe enough to cause
+  errors during authentication attempts.
+
 ==  3.24.0 (2024-01-25)
 
 Bugfixes
 
@@ -7,7 +7,7 @@
 
 # single source of truth for package version,
 # see https://packaging.python.org/en/latest/single_source_version/
-__version__ = "3.24.0"
+__version__ = "3.25.0"
 
 # app name to send as part of SDK requests
 app_name = f"Globus CLI v{__version__}"