diff --git a/CHANGELOG.md b/CHANGELOG.md
index 4c093b0c4a00..f2d75bb4a0eb 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,3 +1,21 @@
+<a name="20.3.25"></a>
+
+# 20.3.25 (2026-04-29)
+
+### @angular-devkit/build-angular
+
+| Commit                                                                                              | Type | Description               |
+| --------------------------------------------------------------------------------------------------- | ---- | ------------------------- |
+| [5e01ef40e](https://github.com/angular/angular-cli/commit/5e01ef40eb87deda79d18654fc696b64d18bf889) | fix  | upgrade postcss to 8.5.12 |
+
+### @angular/ssr
+
+| Commit                                                                                              | Type | Description                                                                      |
+| --------------------------------------------------------------------------------------------------- | ---- | -------------------------------------------------------------------------------- |
+| [6686848d9](https://github.com/angular/angular-cli/commit/6686848d946ca157f9b92b84db377e912266395e) | fix  | introduce trustProxyHeaders option to safely validate and sanitize proxy headers |
+
+<!-- CHANGELOG SPLIT MARKER -->
+
 <a name="20.3.24"></a>
 
 # 20.3.24 (2026-04-15)
diff --git a/package.json b/package.json
index c12f9964b448..105e77fb4d40 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@angular/devkit-repo",
-  "version": "20.3.24",
+  "version": "20.3.25",
   "private": true,
   "description": "Software Development Kit for Angular",
   "keywords": [