diff --git a/Makefile b/Makefile
index 81ac24e..aa446c1 100644
--- a/Makefile
+++ b/Makefile
@@ -10,7 +10,7 @@
 VERSION_MAJOR			:= 2
 VERSION_MINOR			:= 12
 # VERSION_PATCH is only used for LTS releases
-VERSION_PATCH			:= 2
+VERSION_PATCH			:= 3
 VERSION				:= ${VERSION_MAJOR}.${VERSION_MINOR}.${VERSION_PATCH}
 
 # Default goal is build all images
diff --git a/docs/change-log.md b/docs/change-log.md
index ff6200e..05326f5 100644
--- a/docs/change-log.md
+++ b/docs/change-log.md
@@ -3,6 +3,64 @@
 This document contains a summary of the new features, changes, fixes and known
 issues in each release of Trusted Firmware-A.
 
+## [lts-2.12.3](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/refs/tags/lts-v2.12.2..refs/tags/lts-v2.12.3) (2025-05-23)
+
+### Code Refactoring
+
+- **Libraries**
+
+  - **CPU Support**
+
+    - drop unused argument forward_flag ([5d8f821](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/5d8f821c5e1f8775c09ef884c2891fae0d2f3b86))
+    - move errata check to common code ([1ca07cd](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/1ca07cd723fb804686467a4e21499303110117f7))
+    - optimize CVE checking ([481e161](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/481e161eb0c3ee2ac3f6fb7fcd11f7faef203e11))
+
+### Resolved Issues
+
+- **Libraries**
+
+  - **CPU Support**
+
+    - drop esb from the Neoverse N1 ([fdd7067](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/fdd7067026f944196c387e453fbc646ac3a0e27a))
+
+- **Dependencies**
+
+  - remove deprecated husky commands ([70ed229](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/70ed2295748d99b038e276887f0732e0d515922f))
+
+### Miscellaneous
+
+- **Libraries**
+
+  - **CPU Support**
+
+    - remove in-order checks ([1967879](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/1967879b3e76ff490049f2c3f715f2039895b96a))
+
+- **Documentation**
+
+  - add a SBOM template in CycloneDX format ([88da40b](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/88da40bcb5219f298c9099f9dc351e5bca5d0e9f))
+
+### Documentation
+
+- **Documentation**
+
+  - **Changelog**
+
+    - display all sections ([75e3835](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/75e38356ed3658a7fa2b1cd64a15cb0b649f9af4))
+
+  - **Prerequisites**
+
+    - update mbedtls to v3.6.3 ([1cd56ab](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/1cd56abd89ba10cc0026e38bb66c3c36187b7243))
+
+### New Features
+
+- **Drivers**
+
+  - **Authentication**
+
+    - **mbedTLS**
+
+      - update mbedtls to version 3.6.3 ([cb3aea9](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/cb3aea9caa9dad4fe3470eae88ed2939d4d90571))
+
 ## [lts-2.12.2](https://review.trustedfirmware.org/plugins/gitiles/TF-A/trusted-firmware-a/+/refs/tags/lts-v2.12.1..refs/tags/lts-v2.12.2) (2025-04-25)
 
 ### New Features
diff --git a/docs/conf.py b/docs/conf.py
index daa71e5..1453202 100644
--- a/docs/conf.py
+++ b/docs/conf.py
@@ -14,8 +14,8 @@
 
 project = "Trusted Firmware-A"
 author = "Trusted Firmware-A contributors"
-version = "2.12.2"
-release = "2.12.2"
+version = "2.12.3"
+release = "2.12.3"
 
 # -- General configuration ---------------------------------------------------
 
diff --git a/package-lock.json b/package-lock.json
index 5f3ed61..48f7b29 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -1,12 +1,12 @@
 {
   "name": "trusted-firmware-a",
-  "version": "2.12.2",
+  "version": "2.12.3",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "trusted-firmware-a",
-      "version": "2.12.2",
+      "version": "2.12.3",
       "license": "BSD-3-Clause",
       "devDependencies": {
         "@commitlint/cli": "^19.0.0",
diff --git a/package.json b/package.json
index 86c2d04..d9364e2 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "trusted-firmware-a",
-  "version": "2.12.2",
+  "version": "2.12.3",
   "license": "BSD-3-Clause",
   "type": "module",
   "private": true,
diff --git a/pyproject.toml b/pyproject.toml
index 1c4cc3e..8038c40 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -1,6 +1,6 @@
 [tool.poetry]
 name = "trusted-firmware-a"
-version = "2.12.2"
+version = "2.12.3"
 description = "Trusted Firmware-A (TF-A) Python dependencies."
 authors = ["Arm Ltd."]
 license = "BSD-3-Clause"
diff --git a/readme.rst b/readme.rst
index 6432246..206c9c7 100644
--- a/readme.rst
+++ b/readme.rst
@@ -51,3 +51,4 @@
 
 
 
+
diff --git a/tools/conventional-changelog-tf-a/package.json b/tools/conventional-changelog-tf-a/package.json
index 6cfd6af..f9fa5ce 100644
--- a/tools/conventional-changelog-tf-a/package.json
+++ b/tools/conventional-changelog-tf-a/package.json
@@ -1,6 +1,6 @@
 {
   "name": "conventional-changelog-tf-a",
-  "version": "2.12.2",
+  "version": "2.12.3",
   "license": "BSD-3-Clause",
   "private": true,
   "main": "index.js",