diff --git a/CHANGELOG.md b/CHANGELOG.md
index 658c283..85a33ed 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,9 +1,13 @@
-## [Unreleased]
+## [2.0.0] - 2026-07-14
 
 - **Breaking:** reading an attribute that is absent from an API payload now
   raises `Booqable::MissingAttribute` (a `NoMethodError` subclass) instead of
   silently returning nil.
 - Support Ruby 4.0
+- Require `cgi` and declare it as a runtime dependency. Fixes
+  `undefined method 'parse' for class CGI` when handling `invalid_grant`
+  OAuth errors in apps that don't load the full cgi library themselves
+  (e.g. Rails 8.1+, which only loads `cgi/escape`).
 
 ## [1.2.1] - 2026-06-10
 
diff --git a/Gemfile.lock b/Gemfile.lock
index 8b9a7b3..98113db 100644
--- a/Gemfile.lock
+++ b/Gemfile.lock
@@ -11,7 +11,7 @@ GIT
 PATH
   remote: .
   specs:
-    booqable (1.2.1)
+    booqable (2.0.0)
       addressable (~> 2.8)
       cgi (~> 0.5)
       faraday (~> 2.13)
diff --git a/lib/booqable/version.rb b/lib/booqable/version.rb
index 98aae7b..11c62b5 100644
--- a/lib/booqable/version.rb
+++ b/lib/booqable/version.rb
@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module Booqable
-  VERSION = "1.2.1"
+  VERSION = "2.0.0"
 end