diff --git a/.release-please-manifest.json b/.release-please-manifest.json
index 5ae089a7..ac86c829 100644
--- a/.release-please-manifest.json
+++ b/.release-please-manifest.json
@@ -1,3 +1,3 @@
 {
-  ".": "7.0.0-rc.1"
+  ".": "7.0.0-rc.2"
 }
diff --git a/CHANGELOG.md b/CHANGELOG.md
index a06914fc..9df3bf6f 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,5 +1,13 @@
 # Changelog
 
+## [7.0.0-rc.2](https://github.com/adcontextprotocol/adcp-client-python/compare/v7.0.0-rc.1...v7.0.0-rc.2) (2026-08-05)
+
+
+### Bug Fixes
+
+* **ci:** harden privileged workflows ([#1003](https://github.com/adcontextprotocol/adcp-client-python/issues/1003)) ([688b3e4](https://github.com/adcontextprotocol/adcp-client-python/commit/688b3e4c6f4551f7f04d4ce68f6a69a5ee943523))
+* **security:** harden external sinks and callbacks ([#1002](https://github.com/adcontextprotocol/adcp-client-python/issues/1002)) ([e27c6a7](https://github.com/adcontextprotocol/adcp-client-python/commit/e27c6a7a8b9831806540f69101f2ad4e33c3a162))
+
 ## [7.0.0-rc.1](https://github.com/adcontextprotocol/adcp-client-python/compare/v7.0.0-rc...v7.0.0-rc.1) (2026-08-05)
 
 
diff --git a/pyproject.toml b/pyproject.toml
index 52b33a72..99c2e98a 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "adcp"
-version = "7.0.0rc1"
+version = "7.0.0rc2"
 description = "Official Python client for the Ad Context Protocol (AdCP)"
 authors = [
     {name = "AdCP Community", email = "maintainers@adcontextprotocol.org"}