diff --git a/CHANGELOG.md b/CHANGELOG.md
index d28554d..4f9befe 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,5 +1,9 @@
 ## Unreleased
 
+Features:
+
+* `secretId` is no longer required for approle to support advanced use cases like machine login when `bind_secret_id` is false. [GH-522](https://github.com/hashicorp/vault-action/pull/522)
+
 ## 3.0.0 (February 15, 2024)
 
 Improvements: