globus
diff --git a/‎changelog.adoc
+12 b/‎changelog.adoc
+12
diff --git a/‎changelog.d/20231208_110449_derek_client_identity_lookup.md
-5 b/‎changelog.d/20231208_110449_derek_client_identity_lookup.md
-5
diff --git a/‎changelog.d/20231208_162645_sirosen_add_api_gcs.md
-4 b/‎changelog.d/20231208_162645_sirosen_add_api_gcs.md
-4
diff --git a/‎src/globus_cli/version.py
+1-1 b/‎src/globus_cli/version.py
+1-1
@@ -2,6 +2,18 @@
 
 // scriv-insert-here
 
+== 3.22.0 (2023-12-11)
+
+Enhancements:
+
+* Add `globus api gcs $ENDPOINT_ID` as a command for directly interacting with
+  the GCS Manager API
+
+Bugfixes:
+
+* Commands which attempt to infer the identity of the user running the command will now
+  correctly use the `client_id` for confidential client-based invocation patterns.
+
 == 3.21.0 (2023-12-08)
 
 Enhancements:
 
@@ -7,7 +7,7 @@
 
 # single source of truth for package version,
 # see https://packaging.python.org/en/latest/single_source_version/
-__version__ = "3.21.0"
+__version__ = "3.22.0"
 
 # app name to send as part of SDK requests
 app_name = f"Globus CLI v{__version__}"