diff --git a/api/CHANGELOG.md b/api/CHANGELOG.md
index afd6c2d86d..4a0d6037ad 100644
--- a/api/CHANGELOG.md
+++ b/api/CHANGELOG.md
@@ -4,6 +4,28 @@ All notable changes to the **Prowler API** are documented in this file.
 
 <!-- changelog: release notes start -->
 
+## [1.46.0] (Prowler v5.45.0)
+
+### 🐞 Fixed
+
+- OCI provider secrets keep the region as home region for credential validation and scans, instead of always using us-ashburn-1 [(#12865)](https://github.com/prowler-cloud/prowler/pull/12865)
+- Gunicorn workers are now recycled after 10000 requests (plus up to 1000 of jitter) to cap memory growth, configurable with `GUNICORN_MAX_REQUESTS` and `GUNICORN_MAX_REQUESTS_JITTER` [(#13047)](https://github.com/prowler-cloud/prowler/pull/13047)
+
+### 🔐 Security
+
+- `pyjwt` from 2.13.0 to 2.14.0, patching GHSA-ffc3-869f-jxw9 [(#12911)](https://github.com/prowler-cloud/prowler/pull/12911)
+- Sentry error events no longer include user identity, IP addresses, cookies, headers or request bodies, which could contain personal data or provider credentials [(#12912)](https://github.com/prowler-cloud/prowler/pull/12912)
+- Kubernetes kubeconfig validation accepts only inline credentials and known cluster fields, rejecting file-path fields (`tokenFile`, `client-certificate`, `client-key`, `certificate-authority`), command-based authentication (`exec`, `cmd-path`), `auth-provider` directives, proxy URLs and unknown user or cluster keys; stored kubeconfigs are re-validated before each scan and connection test [(#12952)](https://github.com/prowler-cloud/prowler/pull/12952)
+- `django` from 5.1.15 to 5.2.17, patching CVE-2026-15307 [(#12953)](https://github.com/prowler-cloud/prowler/pull/12953)
+- `dulwich` from 1.2.5 to 1.2.9, patching GHSA-5fqc-mrg8-w798, GHSA-8mcx-5rqc-vhmf, GHSA-8w8g-wq8h-fq33 and GHSA-cm62-gvxx-vmxx [(#12953)](https://github.com/prowler-cloud/prowler/pull/12953)
+- `urllib3` from 2.7.0 to 2.8.0, patching CVE-2026-97687 and CVE-2026-97689 [(#12953)](https://github.com/prowler-cloud/prowler/pull/12953)
+- `pymongo` from 4.15.1 to 4.18.2, patching CVE-2026-96748 and CVE-2026-96749 [(#12955)](https://github.com/prowler-cloud/prowler/pull/12955)
+- `GET /api/v1/users/{id}` no longer exposes another user's memberships, roles or tenant names from tenants other than the one in the request token [(#12965)](https://github.com/prowler-cloud/prowler/pull/12965)
+- Python base image from 3.12.13 to 3.12.15 and Trivy from 0.74.0 to 0.75.0 in the API container image, patching CVE-2026-19445, CVE-2026-19553 and the grpc-go and x/crypto CVEs bundled in Trivy [(#13009)](https://github.com/prowler-cloud/prowler/pull/13009)
+- PowerShell from 7.5.11 to 7.5.12 in the API container image, bundling .NET runtime 9.0.21 [(#13037)](https://github.com/prowler-cloud/prowler/pull/13037)
+
+---
+
 ## [1.45.0] (Prowler v5.44.0)
 
 ### 🚀 Added
diff --git a/api/changelog.d/api-image-powershell-7-5-12.security.md b/api/changelog.d/api-image-powershell-7-5-12.security.md
deleted file mode 100644
index 812cd97a7b..0000000000
--- a/api/changelog.d/api-image-powershell-7-5-12.security.md
+++ /dev/null
@@ -1 +0,0 @@
-PowerShell from 7.5.11 to 7.5.12 in the API container image, bundling .NET runtime 9.0.21
diff --git a/api/changelog.d/api-image-trivy-0-75-0.security.md b/api/changelog.d/api-image-trivy-0-75-0.security.md
deleted file mode 100644
index 4d5759d29c..0000000000
--- a/api/changelog.d/api-image-trivy-0-75-0.security.md
+++ /dev/null
@@ -1 +0,0 @@
-Python base image from 3.12.13 to 3.12.15 and Trivy from 0.74.0 to 0.75.0 in the API container image, patching CVE-2026-19445, CVE-2026-19553 and the grpc-go and x/crypto CVEs bundled in Trivy
diff --git a/api/changelog.d/django-5-2-17.security.md b/api/changelog.d/django-5-2-17.security.md
deleted file mode 100644
index ec1e6a7450..0000000000
--- a/api/changelog.d/django-5-2-17.security.md
+++ /dev/null
@@ -1 +0,0 @@
-`django` from 5.1.15 to 5.2.17, patching CVE-2026-15307
diff --git a/api/changelog.d/dulwich-1-2-9.security.md b/api/changelog.d/dulwich-1-2-9.security.md
deleted file mode 100644
index 8f1dd24253..0000000000
--- a/api/changelog.d/dulwich-1-2-9.security.md
+++ /dev/null
@@ -1 +0,0 @@
-`dulwich` from 1.2.5 to 1.2.9, patching GHSA-5fqc-mrg8-w798, GHSA-8mcx-5rqc-vhmf, GHSA-8w8g-wq8h-fq33 and GHSA-cm62-gvxx-vmxx
diff --git a/api/changelog.d/gunicorn-max-requests.fixed.md b/api/changelog.d/gunicorn-max-requests.fixed.md
deleted file mode 100644
index e43a4ea57a..0000000000
--- a/api/changelog.d/gunicorn-max-requests.fixed.md
+++ /dev/null
@@ -1 +0,0 @@
-Gunicorn workers are now recycled after 10000 requests (plus up to 1000 of jitter) to cap memory growth, configurable with `GUNICORN_MAX_REQUESTS` and `GUNICORN_MAX_REQUESTS_JITTER`
diff --git a/api/changelog.d/kubeconfig-inline-credentials.security.md b/api/changelog.d/kubeconfig-inline-credentials.security.md
deleted file mode 100644
index 8d6115d4c3..0000000000
--- a/api/changelog.d/kubeconfig-inline-credentials.security.md
+++ /dev/null
@@ -1 +0,0 @@
-Kubernetes kubeconfig validation accepts only inline credentials and known cluster fields, rejecting file-path fields (`tokenFile`, `client-certificate`, `client-key`, `certificate-authority`), command-based authentication (`exec`, `cmd-path`), `auth-provider` directives, proxy URLs and unknown user or cluster keys; stored kubeconfigs are re-validated before each scan and connection test
diff --git a/api/changelog.d/oci-home-region-bootstrap.fixed.md b/api/changelog.d/oci-home-region-bootstrap.fixed.md
deleted file mode 100644
index 0d28492c2b..0000000000
--- a/api/changelog.d/oci-home-region-bootstrap.fixed.md
+++ /dev/null
@@ -1 +0,0 @@
-OCI provider secrets keep the region as home region for credential validation and scans, instead of always using us-ashburn-1
diff --git a/api/changelog.d/pyjwt-2-14-0.security.md b/api/changelog.d/pyjwt-2-14-0.security.md
deleted file mode 100644
index fab78f2937..0000000000
--- a/api/changelog.d/pyjwt-2-14-0.security.md
+++ /dev/null
@@ -1 +0,0 @@
-`pyjwt` from 2.13.0 to 2.14.0, patching GHSA-ffc3-869f-jxw9
diff --git a/api/changelog.d/pymongo-4-18-2.security.md b/api/changelog.d/pymongo-4-18-2.security.md
deleted file mode 100644
index b621313d25..0000000000
--- a/api/changelog.d/pymongo-4-18-2.security.md
+++ /dev/null
@@ -1 +0,0 @@
-`pymongo` from 4.15.1 to 4.18.2, patching CVE-2026-96748 and CVE-2026-96749
diff --git a/api/changelog.d/sentry-no-personal-data.security.md b/api/changelog.d/sentry-no-personal-data.security.md
deleted file mode 100644
index b0c7d6d5fe..0000000000
--- a/api/changelog.d/sentry-no-personal-data.security.md
+++ /dev/null
@@ -1 +0,0 @@
-Sentry error events no longer include user identity, IP addresses, cookies, headers or request bodies, which could contain personal data or provider credentials
diff --git a/api/changelog.d/urllib3-2-8-0.security.md b/api/changelog.d/urllib3-2-8-0.security.md
deleted file mode 100644
index 4645bb5942..0000000000
--- a/api/changelog.d/urllib3-2-8-0.security.md
+++ /dev/null
@@ -1 +0,0 @@
-`urllib3` from 2.7.0 to 2.8.0, patching CVE-2026-97687 and CVE-2026-97689
diff --git a/api/changelog.d/user-detail-cross-tenant-relations.security.md b/api/changelog.d/user-detail-cross-tenant-relations.security.md
deleted file mode 100644
index 2ada35d1ea..0000000000
--- a/api/changelog.d/user-detail-cross-tenant-relations.security.md
+++ /dev/null
@@ -1 +0,0 @@
-`GET /api/v1/users/{id}` no longer exposes another user's memberships, roles or tenant names from tenants other than the one in the request token
diff --git a/mcp_server/CHANGELOG.md b/mcp_server/CHANGELOG.md
index 07e92992fc..4f50280aeb 100644
--- a/mcp_server/CHANGELOG.md
+++ b/mcp_server/CHANGELOG.md
@@ -4,6 +4,15 @@ All notable changes to the **Prowler MCP Server** are documented in this file.
 
 <!-- changelog: release notes start -->
 
+## [0.12.3] (Prowler v5.45.0)
+
+### 🔐 Security
+
+- `pyjwt` from 2.13.0 to 2.14.0, patching GHSA-ffc3-869f-jxw9 [(#12911)](https://github.com/prowler-cloud/prowler/pull/12911)
+- Python from 3.13.14 to 3.13.16 in the MCP container image, patching CVE-2026-19445 and CVE-2026-19553 [(#13009)](https://github.com/prowler-cloud/prowler/pull/13009)
+
+---
+
 ## [0.12.2] (Prowler v5.43.0)
 
 ### 🔐 Security
diff --git a/mcp_server/changelog.d/mcp-image-python-3-13-16.security.md b/mcp_server/changelog.d/mcp-image-python-3-13-16.security.md
deleted file mode 100644
index c926794e3e..0000000000
--- a/mcp_server/changelog.d/mcp-image-python-3-13-16.security.md
+++ /dev/null
@@ -1 +0,0 @@
-Python from 3.13.14 to 3.13.16 in the MCP container image, patching CVE-2026-19445 and CVE-2026-19553
diff --git a/mcp_server/changelog.d/pyjwt-2-14-0.security.md b/mcp_server/changelog.d/pyjwt-2-14-0.security.md
deleted file mode 100644
index fab78f2937..0000000000
--- a/mcp_server/changelog.d/pyjwt-2-14-0.security.md
+++ /dev/null
@@ -1 +0,0 @@
-`pyjwt` from 2.13.0 to 2.14.0, patching GHSA-ffc3-869f-jxw9
diff --git a/prowler/CHANGELOG.md b/prowler/CHANGELOG.md
index d424abdd01..5b43d32051 100644
--- a/prowler/CHANGELOG.md
+++ b/prowler/CHANGELOG.md
@@ -4,6 +4,38 @@ All notable changes to the **Prowler SDK** are documented in this file.
 
 <!-- changelog: release notes start -->
 
+## [5.45.0] (Prowler v5.45.0)
+
+### 🚀 Added
+
+- Azure AI Services service for Azure provider, including the `aiservices_account_public_network_access_disabled`, `aiservices_account_local_auth_disabled`, and `aiservices_account_encrypted_with_cmk` checks [(#12925)](https://github.com/prowler-cloud/prowler/pull/12925)
+- `aiservices_account_uses_private_endpoint`, `aiservices_account_outbound_network_restricted`, `aiservices_account_managed_identity_enabled`, and `aiservices_account_diagnostic_logging_enabled` checks for Azure provider [(#12926)](https://github.com/prowler-cloud/prowler/pull/12926)
+- `entra_policy_admin_self_service_password_reset_disabled` check for M365 provider, verifying that Self-Service Password Reset is disabled for administrators [(#12990)](https://github.com/prowler-cloud/prowler/pull/12990)
+- `entra_cross_tenant_access_default_outbound_restricted` check for M365 provider, verifying that default cross-tenant access does not let all users reach all external applications through B2B collaboration or B2B direct connect [(#12991)](https://github.com/prowler-cloud/prowler/pull/12991)
+- `entra_app_registration_redirect_uris_secure` check for M365 provider, flagging app registrations with HTTP, wildcard, malformed or `azurewebsites.net` redirect URIs [(#12993)](https://github.com/prowler-cloud/prowler/pull/12993)
+- `aiservices_account_network_acls_default_action_deny` and `aiservices_deployment_content_filter_prompt_shield_enabled` checks for Azure provider [(#12997)](https://github.com/prowler-cloud/prowler/pull/12997)
+- `entra_dynamic_group_member_of_rule_not_used` check for M365 provider, flagging dynamic groups whose membership rule uses the `memberOf` operator that Microsoft retires on November 3, 2026 [(#13003)](https://github.com/prowler-cloud/prowler/pull/13003)
+- `entra_policy_msol_powershell_blocked` check for M365 provider, verifying that the tenant authorization policy blocks the legacy MSOnline PowerShell module [(#13004)](https://github.com/prowler-cloud/prowler/pull/13004)
+
+### 🐞 Fixed
+
+- OCI API key credentials accept a home region to bootstrap identity calls, so tenancies not subscribed to us-ashburn-1 can connect [(#12865)](https://github.com/prowler-cloud/prowler/pull/12865)
+- AWS Organizations metadata is fetched from the partition of the audited account, using the region that answered the STS bootstrap, instead of the commercial `us-east-1` endpoint a session without a region resolves to, which timed out in GovCloud [(#12988)](https://github.com/prowler-cloud/prowler/pull/12988)
+
+### 🔐 Security
+
+- `pyjwt` from 2.13.0 to 2.14.0, patching GHSA-ffc3-869f-jxw9 [(#12911)](https://github.com/prowler-cloud/prowler/pull/12911)
+- `dulwich` from 1.2.5 to 1.2.9, patching GHSA-5fqc-mrg8-w798, GHSA-8mcx-5rqc-vhmf, GHSA-8w8g-wq8h-fq33 and GHSA-cm62-gvxx-vmxx [(#12953)](https://github.com/prowler-cloud/prowler/pull/12953)
+- `urllib3` from 2.7.0 to 2.8.0, patching CVE-2026-97687 and CVE-2026-97689 [(#12953)](https://github.com/prowler-cloud/prowler/pull/12953)
+- `pymongo` from 4.15.1 to 4.18.2, patching CVE-2026-96748 and CVE-2026-96749 [(#12955)](https://github.com/prowler-cloud/prowler/pull/12955)
+- IaC repository URLs resolving to loopback, private or otherwise non-public hosts rejected before both the connection test and the scan clone, including every destination a redirect points to, with raw errors no longer echoed to the caller or the logs [(#12960)](https://github.com/prowler-cloud/prowler/pull/12960)
+- HTML report compliance column is now escaped, so framework names and requirement IDs containing markup are shown as text instead of being rendered by the browser [(#12963)](https://github.com/prowler-cloud/prowler/pull/12963)
+- CSV outputs (findings, compliance and AWS quick inventory) prefix cells starting with `=`, `+`, `-`, `@`, tab or carriage return with a single quote so spreadsheet applications treat them as text instead of formulas; signed numbers such as `-1` are left untouched [(#12963)](https://github.com/prowler-cloud/prowler/pull/12963)
+- Python base image from 3.12.13 to 3.12.15 and Trivy from 0.74.0 to 0.75.0 in the SDK container image, patching CVE-2026-19445, CVE-2026-19553 and the grpc-go and x/crypto CVEs bundled in Trivy [(#13009)](https://github.com/prowler-cloud/prowler/pull/13009)
+- PowerShell from 7.5.11 to 7.5.12 in the SDK container image, bundling .NET runtime 9.0.21 [(#13037)](https://github.com/prowler-cloud/prowler/pull/13037)
+
+---
+
 ## [5.44.0] (Prowler v5.44.0)
 
 ### 🚀 Added
diff --git a/prowler/changelog.d/aws-organizations-partition-region.fixed.md b/prowler/changelog.d/aws-organizations-partition-region.fixed.md
deleted file mode 100644
index 580a69ec05..0000000000
--- a/prowler/changelog.d/aws-organizations-partition-region.fixed.md
+++ /dev/null
@@ -1 +0,0 @@
-AWS Organizations metadata is fetched from the partition of the audited account, using the region that answered the STS bootstrap, instead of the commercial `us-east-1` endpoint a session without a region resolves to, which timed out in GovCloud
diff --git a/prowler/changelog.d/azure-aiservices-content-filter-checks.added.md b/prowler/changelog.d/azure-aiservices-content-filter-checks.added.md
deleted file mode 100644
index 0f04644b16..0000000000
--- a/prowler/changelog.d/azure-aiservices-content-filter-checks.added.md
+++ /dev/null
@@ -1 +0,0 @@
-`aiservices_account_network_acls_default_action_deny` and `aiservices_deployment_content_filter_prompt_shield_enabled` checks for Azure provider
diff --git a/prowler/changelog.d/azure-aiservices-network-checks.added.md b/prowler/changelog.d/azure-aiservices-network-checks.added.md
deleted file mode 100644
index 804dab6feb..0000000000
--- a/prowler/changelog.d/azure-aiservices-network-checks.added.md
+++ /dev/null
@@ -1 +0,0 @@
-`aiservices_account_uses_private_endpoint`, `aiservices_account_outbound_network_restricted`, `aiservices_account_managed_identity_enabled`, and `aiservices_account_diagnostic_logging_enabled` checks for Azure provider
diff --git a/prowler/changelog.d/azure-aiservices-service.added.md b/prowler/changelog.d/azure-aiservices-service.added.md
deleted file mode 100644
index 3ea7280267..0000000000
--- a/prowler/changelog.d/azure-aiservices-service.added.md
+++ /dev/null
@@ -1 +0,0 @@
-Azure AI Services service for Azure provider, including the `aiservices_account_public_network_access_disabled`, `aiservices_account_local_auth_disabled`, and `aiservices_account_encrypted_with_cmk` checks
diff --git a/prowler/changelog.d/csv-formula-injection.security.md b/prowler/changelog.d/csv-formula-injection.security.md
deleted file mode 100644
index c8fd6b9efd..0000000000
--- a/prowler/changelog.d/csv-formula-injection.security.md
+++ /dev/null
@@ -1 +0,0 @@
-CSV outputs (findings, compliance and AWS quick inventory) prefix cells starting with `=`, `+`, `-`, `@`, tab or carriage return with a single quote so spreadsheet applications treat them as text instead of formulas; signed numbers such as `-1` are left untouched
diff --git a/prowler/changelog.d/dulwich-1-2-9.security.md b/prowler/changelog.d/dulwich-1-2-9.security.md
deleted file mode 100644
index 8f1dd24253..0000000000
--- a/prowler/changelog.d/dulwich-1-2-9.security.md
+++ /dev/null
@@ -1 +0,0 @@
-`dulwich` from 1.2.5 to 1.2.9, patching GHSA-5fqc-mrg8-w798, GHSA-8mcx-5rqc-vhmf, GHSA-8w8g-wq8h-fq33 and GHSA-cm62-gvxx-vmxx
diff --git a/prowler/changelog.d/entra-admin-sspr-disabled.added.md b/prowler/changelog.d/entra-admin-sspr-disabled.added.md
deleted file mode 100644
index 9f46f08bde..0000000000
--- a/prowler/changelog.d/entra-admin-sspr-disabled.added.md
+++ /dev/null
@@ -1 +0,0 @@
-`entra_policy_admin_self_service_password_reset_disabled` check for M365 provider, verifying that Self-Service Password Reset is disabled for administrators
diff --git a/prowler/changelog.d/entra-app-redirect-uris-secure.added.md b/prowler/changelog.d/entra-app-redirect-uris-secure.added.md
deleted file mode 100644
index 0301b96983..0000000000
--- a/prowler/changelog.d/entra-app-redirect-uris-secure.added.md
+++ /dev/null
@@ -1 +0,0 @@
-`entra_app_registration_redirect_uris_secure` check for M365 provider, flagging app registrations with HTTP, wildcard, malformed or `azurewebsites.net` redirect URIs
diff --git a/prowler/changelog.d/entra-cross-tenant-default-outbound.added.md b/prowler/changelog.d/entra-cross-tenant-default-outbound.added.md
deleted file mode 100644
index 504d06509d..0000000000
--- a/prowler/changelog.d/entra-cross-tenant-default-outbound.added.md
+++ /dev/null
@@ -1 +0,0 @@
-`entra_cross_tenant_access_default_outbound_restricted` check for M365 provider, verifying that default cross-tenant access does not let all users reach all external applications through B2B collaboration or B2B direct connect
diff --git a/prowler/changelog.d/entra-dynamic-group-member-of-rule.added.md b/prowler/changelog.d/entra-dynamic-group-member-of-rule.added.md
deleted file mode 100644
index a2b32f6177..0000000000
--- a/prowler/changelog.d/entra-dynamic-group-member-of-rule.added.md
+++ /dev/null
@@ -1 +0,0 @@
-`entra_dynamic_group_member_of_rule_not_used` check for M365 provider, flagging dynamic groups whose membership rule uses the `memberOf` operator that Microsoft retires on November 3, 2026
diff --git a/prowler/changelog.d/entra-msol-powershell-blocked.added.md b/prowler/changelog.d/entra-msol-powershell-blocked.added.md
deleted file mode 100644
index f8e12e10e4..0000000000
--- a/prowler/changelog.d/entra-msol-powershell-blocked.added.md
+++ /dev/null
@@ -1 +0,0 @@
-`entra_policy_msol_powershell_blocked` check for M365 provider, verifying that the tenant authorization policy blocks the legacy MSOnline PowerShell module
diff --git a/prowler/changelog.d/html-compliance-escape.security.md b/prowler/changelog.d/html-compliance-escape.security.md
deleted file mode 100644
index 98b4b12a04..0000000000
--- a/prowler/changelog.d/html-compliance-escape.security.md
+++ /dev/null
@@ -1 +0,0 @@
-HTML report compliance column is now escaped, so framework names and requirement IDs containing markup are shown as text instead of being rendered by the browser
diff --git a/prowler/changelog.d/iac-connection-test-ssrf.security.md b/prowler/changelog.d/iac-connection-test-ssrf.security.md
deleted file mode 100644
index 70e571da6a..0000000000
--- a/prowler/changelog.d/iac-connection-test-ssrf.security.md
+++ /dev/null
@@ -1 +0,0 @@
-IaC repository URLs resolving to loopback, private or otherwise non-public hosts rejected before both the connection test and the scan clone, including every destination a redirect points to, with raw errors no longer echoed to the caller or the logs
diff --git a/prowler/changelog.d/oci-home-region-bootstrap.fixed.md b/prowler/changelog.d/oci-home-region-bootstrap.fixed.md
deleted file mode 100644
index de2997773d..0000000000
--- a/prowler/changelog.d/oci-home-region-bootstrap.fixed.md
+++ /dev/null
@@ -1 +0,0 @@
-OCI API key credentials accept a home region to bootstrap identity calls, so tenancies not subscribed to us-ashburn-1 can connect
diff --git a/prowler/changelog.d/pyjwt-2-14-0.security.md b/prowler/changelog.d/pyjwt-2-14-0.security.md
deleted file mode 100644
index fab78f2937..0000000000
--- a/prowler/changelog.d/pyjwt-2-14-0.security.md
+++ /dev/null
@@ -1 +0,0 @@
-`pyjwt` from 2.13.0 to 2.14.0, patching GHSA-ffc3-869f-jxw9
diff --git a/prowler/changelog.d/pymongo-4-18-2.security.md b/prowler/changelog.d/pymongo-4-18-2.security.md
deleted file mode 100644
index b621313d25..0000000000
--- a/prowler/changelog.d/pymongo-4-18-2.security.md
+++ /dev/null
@@ -1 +0,0 @@
-`pymongo` from 4.15.1 to 4.18.2, patching CVE-2026-96748 and CVE-2026-96749
diff --git a/prowler/changelog.d/sdk-image-powershell-7-5-12.security.md b/prowler/changelog.d/sdk-image-powershell-7-5-12.security.md
deleted file mode 100644
index 84bb68a03d..0000000000
--- a/prowler/changelog.d/sdk-image-powershell-7-5-12.security.md
+++ /dev/null
@@ -1 +0,0 @@
-PowerShell from 7.5.11 to 7.5.12 in the SDK container image, bundling .NET runtime 9.0.21
diff --git a/prowler/changelog.d/sdk-image-trivy-0-75-0.security.md b/prowler/changelog.d/sdk-image-trivy-0-75-0.security.md
deleted file mode 100644
index 0a54879ed0..0000000000
--- a/prowler/changelog.d/sdk-image-trivy-0-75-0.security.md
+++ /dev/null
@@ -1 +0,0 @@
-Python base image from 3.12.13 to 3.12.15 and Trivy from 0.74.0 to 0.75.0 in the SDK container image, patching CVE-2026-19445, CVE-2026-19553 and the grpc-go and x/crypto CVEs bundled in Trivy
diff --git a/prowler/changelog.d/urllib3-2-8-0.security.md b/prowler/changelog.d/urllib3-2-8-0.security.md
deleted file mode 100644
index 4645bb5942..0000000000
--- a/prowler/changelog.d/urllib3-2-8-0.security.md
+++ /dev/null
@@ -1 +0,0 @@
-`urllib3` from 2.7.0 to 2.8.0, patching CVE-2026-97687 and CVE-2026-97689
diff --git a/ui/CHANGELOG.md b/ui/CHANGELOG.md
index 5d62b9da6f..f65555d84e 100644
--- a/ui/CHANGELOG.md
+++ b/ui/CHANGELOG.md
@@ -4,6 +4,29 @@ All notable changes to the **Prowler UI** are documented in this file.
 
 <!-- changelog: release notes start -->
 
+## [1.45.0] (Prowler v5.45.0)
+
+### 🚀 Added
+
+- Option to invite a teammate from the AWS connect step when the user cannot access the account credentials [(#12917)](https://github.com/prowler-cloud/prowler/pull/12917)
+
+### 🐞 Fixed
+
+- Required home region selector in the OCI credentials form, so tenancies not subscribed to us-ashburn-1 can connect [(#12865)](https://github.com/prowler-cloud/prowler/pull/12865)
+- First-login redirect to the add-provider wizard is retried on the next load when the navigation was cut short, on Cloud and self-hosted alike, instead of being written off after a single attempt [(#12914)](https://github.com/prowler-cloud/prowler/pull/12914)
+- Slack partial channel list message tells the user to invite the app to a missing channel [(#13036)](https://github.com/prowler-cloud/prowler/pull/13036)
+- Registry provider discovery distinguishes paid-plan upgrades, missing credentials, and connection failures [(#13038)](https://github.com/prowler-cloud/prowler/pull/13038)
+
+### 🔐 Security
+
+- `next` to 16.3.6, patching a remote code execution in `next/og` `ImageResponse` (GHSA-vcvr-r3jv-pc5j) [(#12922)](https://github.com/prowler-cloud/prowler/pull/12922)
+- Kubernetes kubeconfig form validation accepts only inline credentials and known cluster fields, rejecting file-path, command-based, `auth-provider`, proxy URL and unknown fields before submission [(#12952)](https://github.com/prowler-cloud/prowler/pull/12952)
+- `proxy-addr` to 2.0.8, patching IP spoofing through IPv4-mapped IPv6 trust subnets (GHSA-jqcg-44mw-7w3h) [(#12957)](https://github.com/prowler-cloud/prowler/pull/12957)
+- `sharp` to 0.35.5, patching a librsvg memory vulnerability that can lead to remote code execution on glibc-based Linux (GHSA-wq5f-xc86-pv6w) [(#12968)](https://github.com/prowler-cloud/prowler/pull/12968)
+- `next` to 16.3.8, patching a server-side request forgery in Image Optimization (GHSA-cjq9-62q9-8jv4) [(#12987)](https://github.com/prowler-cloud/prowler/pull/12987)
+
+---
+
 ## [1.44.0] (Prowler v5.44.0)
 
 ### 🚀 Added
diff --git a/ui/changelog.d/aws-invite-teammate.added.md b/ui/changelog.d/aws-invite-teammate.added.md
deleted file mode 100644
index 150bec96c1..0000000000
--- a/ui/changelog.d/aws-invite-teammate.added.md
+++ /dev/null
@@ -1 +0,0 @@
-Option to invite a teammate from the AWS connect step when the user cannot access the account credentials
diff --git a/ui/changelog.d/kubeconfig-inline-credentials.security.md b/ui/changelog.d/kubeconfig-inline-credentials.security.md
deleted file mode 100644
index 051869feec..0000000000
--- a/ui/changelog.d/kubeconfig-inline-credentials.security.md
+++ /dev/null
@@ -1 +0,0 @@
-Kubernetes kubeconfig form validation accepts only inline credentials and known cluster fields, rejecting file-path, command-based, `auth-provider`, proxy URL and unknown fields before submission
diff --git a/ui/changelog.d/next-image-optimization-ssrf.security.md b/ui/changelog.d/next-image-optimization-ssrf.security.md
deleted file mode 100644
index 37c141726f..0000000000
--- a/ui/changelog.d/next-image-optimization-ssrf.security.md
+++ /dev/null
@@ -1 +0,0 @@
-`next` to 16.3.8, patching a server-side request forgery in Image Optimization (GHSA-cjq9-62q9-8jv4)
diff --git a/ui/changelog.d/next-og-image-response-rce.security.md b/ui/changelog.d/next-og-image-response-rce.security.md
deleted file mode 100644
index d9f4eb4894..0000000000
--- a/ui/changelog.d/next-og-image-response-rce.security.md
+++ /dev/null
@@ -1 +0,0 @@
-`next` to 16.3.6, patching a remote code execution in `next/og` `ImageResponse` (GHSA-vcvr-r3jv-pc5j)
diff --git a/ui/changelog.d/oci-home-region-bootstrap.fixed.md b/ui/changelog.d/oci-home-region-bootstrap.fixed.md
deleted file mode 100644
index 3982d0b7d1..0000000000
--- a/ui/changelog.d/oci-home-region-bootstrap.fixed.md
+++ /dev/null
@@ -1 +0,0 @@
-Required home region selector in the OCI credentials form, so tenancies not subscribed to us-ashburn-1 can connect
diff --git a/ui/changelog.d/proxy-addr-ip-spoofing.security.md b/ui/changelog.d/proxy-addr-ip-spoofing.security.md
deleted file mode 100644
index 9574c50d16..0000000000
--- a/ui/changelog.d/proxy-addr-ip-spoofing.security.md
+++ /dev/null
@@ -1 +0,0 @@
-`proxy-addr` to 2.0.8, patching IP spoofing through IPv4-mapped IPv6 trust subnets (GHSA-jqcg-44mw-7w3h)
diff --git a/ui/changelog.d/registry-access-prompts.fixed.md b/ui/changelog.d/registry-access-prompts.fixed.md
deleted file mode 100644
index 19b79647ce..0000000000
--- a/ui/changelog.d/registry-access-prompts.fixed.md
+++ /dev/null
@@ -1 +0,0 @@
-Registry provider discovery distinguishes paid-plan upgrades, missing credentials, and connection failures
diff --git a/ui/changelog.d/sharp-librsvg-vulnerability.security.md b/ui/changelog.d/sharp-librsvg-vulnerability.security.md
deleted file mode 100644
index 4fe262e6cd..0000000000
--- a/ui/changelog.d/sharp-librsvg-vulnerability.security.md
+++ /dev/null
@@ -1 +0,0 @@
-`sharp` to 0.35.5, patching a librsvg memory vulnerability that can lead to remote code execution on glibc-based Linux (GHSA-wq5f-xc86-pv6w)
diff --git a/ui/changelog.d/slack-partial-channel-list-message.fixed.md b/ui/changelog.d/slack-partial-channel-list-message.fixed.md
deleted file mode 100644
index e317168738..0000000000
--- a/ui/changelog.d/slack-partial-channel-list-message.fixed.md
+++ /dev/null
@@ -1 +0,0 @@
-Slack partial channel list message tells the user to invite the app to a missing channel
diff --git a/ui/changelog.d/ui-first-run-redirect-until-wizard-opens.fixed.md b/ui/changelog.d/ui-first-run-redirect-until-wizard-opens.fixed.md
deleted file mode 100644
index e2d6c268ee..0000000000
--- a/ui/changelog.d/ui-first-run-redirect-until-wizard-opens.fixed.md
+++ /dev/null
@@ -1 +0,0 @@
-First-login redirect to the add-provider wizard is retried on the next load when the navigation was cut short, on Cloud and self-hosted alike, instead of being written off after a single attempt