diff --git a/VERSION b/VERSION
index 6a5e98a744e..cc904638af8 100644
--- a/VERSION
+++ b/VERSION
@@ -1 +1 @@
-v1.2.1
+v1.2.2
diff --git a/release-notes/current.yaml b/release-notes/current.yaml
index 7b9d547d839..dbff9de3a19 100644
--- a/release-notes/current.yaml
+++ b/release-notes/current.yaml
@@ -5,8 +5,6 @@ breaking changes: |
   The Container `ports` field of the gateway instance has been removed, which will cause the gateway Pod to be rebuilt when upgrading the version.
   ClientTrafficPolicy previously treated an empty TLS ALPNProtocols list as being undefined and applied Envoy Gateway defaults.
   An empty TLS ALPNProtocols list is now treated as user-defined disablement of the TLS ALPN extension.
-  Always use `::` and `IPv4Compact` enabled on dynamic listeners.
-  Use `V4_PREFERRED` instead of `V4_ONLY` by default for the cluster's `DnsLookupFamily`.
 
 # Updates addressing vulnerabilities, security flaws, or compliance requirements.
 security updates: |
@@ -18,10 +16,7 @@ new features: |
 
 # Fixes for bugs identified in previous versions.
 bug fixes: |
-  Fixed failed to update SecurityPolicy resources with the `backendRef` field specified
-  Fixed Envoy rejecting TCP Listeners that have no attached TCPRoutes
-  Fixed xDS translation failed when oidc tokenEndpoint and jwt remoteJWKS are specified in the same SecurityPolicy and using the same hostname
-  Fixed frequent 503 errors when connecting to a Service experiencing high Pod churn
+  Add a bug fix here
 
 # Enhancements that improve performance.
 performance improvements: |
diff --git a/release-notes/v1.2.2.yaml b/release-notes/v1.2.2.yaml
new file mode 100644
index 00000000000..ef9630ef018
--- /dev/null
+++ b/release-notes/v1.2.2.yaml
@@ -0,0 +1,14 @@
+date: November 27, 2024
+
+breaking changes: |
+  Always use `::` and `IPv4Compact` enabled on dynamic listeners.
+  Use `V4_PREFERRED` instead of `V4_ONLY` by default for the cluster's `DnsLookupFamily`.
+
+bug fixes: |
+  Fixed Envoy rejecting TCP Listeners that have no attached TCPRoutes
+  Fixed failed to update SecurityPolicy resources with the `backendRef` field specified
+  Fixed xDS translation failed when oidc tokenEndpoint and jwt remoteJWKS are specified in the same SecurityPolicy and using the same hostname
+  Fixed frequent 503 errors when connecting to a Service experiencing high Pod churn
+
+Other changes: |
+  Bump the RateLimit image to 49af5cca
diff --git a/site/content/en/news/releases/notes/v1.2.2.md b/site/content/en/news/releases/notes/v1.2.2.md
new file mode 100644
index 00000000000..579e4e8f313
--- /dev/null
+++ b/site/content/en/news/releases/notes/v1.2.2.md
@@ -0,0 +1,19 @@
+---
+title: "v1.2.2"
+publishdate: 2024-11-27
+---
+
+Date: November 27, 2024
+
+## Breaking Changes
+- Always use `::` and `IPv4Compact` enabled on dynamic listeners.
+- Use `V4_PREFERRED` instead of `V4_ONLY` by default for the cluster's `DnsLookupFamily`.
+
+## Bug fixes
+- Fixed Envoy rejecting TCP Listeners that have no attached TCPRoutes.
+- Fixed failed to update SecurityPolicy resources with the `backendRef` field specified.
+- Fixed xDS translation failed when oidc tokenEndpoint and jwt remoteJWKS are specified in the same SecurityPolicy and using the same hostname.
+- Fixed frequent 503 errors when connecting to a Service experiencing high Pod churn.
+
+## Other changes
+- Bump the RateLimit image to 49af5cca.
diff --git a/site/layouts/shortcodes/helm-version.html b/site/layouts/shortcodes/helm-version.html
index b28198f58ee..84a9578a70d 100644
--- a/site/layouts/shortcodes/helm-version.html
+++ b/site/layouts/shortcodes/helm-version.html
@@ -6,8 +6,8 @@
 {{- "v1.1.3" -}}
 {{- end -}}
 {{- with (strings.HasPrefix $pagePrefix "v1.2") -}}
-{{- "v1.2.1" -}}
+{{- "v1.2.2" -}}
 {{- end -}}
 {{- with (strings.HasPrefix $pagePrefix "doc") -}}
-{{- "v1.2.1" -}}
+{{- "v1.2.2" -}}
 {{- end -}}
diff --git a/site/layouts/shortcodes/yaml-version.html b/site/layouts/shortcodes/yaml-version.html
index 55d18309a95..adef464cd8e 100644
--- a/site/layouts/shortcodes/yaml-version.html
+++ b/site/layouts/shortcodes/yaml-version.html
@@ -6,8 +6,8 @@
 {{- "v1.1.3" -}}
 {{- end -}}
 {{- with (strings.HasPrefix $pagePrefix "v1.2") -}}
-{{- "v1.2.1" -}}
+{{- "v1.2.2" -}}
 {{- end -}}
 {{- with (strings.HasPrefix $pagePrefix "doc") -}}
-{{- "v1.2.1" -}}
+{{- "v1.2.2" -}}
 {{- end -}}