diff --git a/CHANGELOG.md b/CHANGELOG.md
index 0ec48dbc..d3f3dc8b 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,10 +1,11 @@
 # Release History
 
-## Unreleased
+## 3.0.0
 
 - Upgrade the native kernel backend to 1.4.0.
 - **Breaking:** require Node.js versions containing the CVE-2026-111497 Brotli decoder fix: 22.23.4+, 24.22.1+, or 26.12.1+. Node.js 20, 23, and 25 are no longer supported because those end-of-life lines have no fix.
 - Return empty results with the standard schema from Thrift `getPrimaryKeys()` when a catalog, schema, or table is missing, instead of throwing. (#553)
+- Update locked `follow-redirects` and `serialize-javascript` versions to remediate security findings.
 
 ## 2.4.0
 
diff --git a/package-lock.json b/package-lock.json
index 914103c1..a826bf52 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -1,12 +1,12 @@
 {
   "name": "@databricks/sql",
-  "version": "2.4.0",
+  "version": "3.0.0",
   "lockfileVersion": 2,
   "requires": true,
   "packages": {
     "": {
       "name": "@databricks/sql",
-      "version": "2.4.0",
+      "version": "3.0.0",
       "license": "Apache-2.0",
       "dependencies": {
         "apache-arrow": "^13.0.0",
diff --git a/package.json b/package.json
index c83d271e..cef45982 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@databricks/sql",
-  "version": "2.4.0",
+  "version": "3.0.0",
   "description": "Driver for connection to Databricks SQL via Thrift API.",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",