diff --git a/CHANGELOG b/CHANGELOG
index ba72d1515ee..7264c9b2f1f 100644
--- a/CHANGELOG
+++ b/CHANGELOG
@@ -1,3 +1,22 @@
+v1.6.5
+  Version 1.6.5
+
+  Bugfix release
+
+  - Proactively refresh credentials when applying and treat a missing
+    `access_token` as invalid. Note: This change reveals surprising behavior
+    between default credentials and batches. If you allow
+    `googleapiclient.discovery.build` to use default credentials *and* specify
+    different credentials by providing `batch.execut()` with an explicit `http`
+    argument, your individual requests will use the default credentials and
+    *not* the credentials specified to the batch http. To avoid this, tell
+    `build` explicitly not to use default credentials by specifying
+    `build(..., http=httplib2.Http()`. (#469)
+  - Remove mutual exclusivity check for developerKey and credentials (#465)
+  - Handle unknown media length. (#406)
+  - Handle variant error format gracefully. (#459)
+  - Avoid testing against Django >= 2.0.0 on Python 2. (#460)
+
 v1.6.4
   Version 1.6.4
 
diff --git a/googleapiclient/__init__.py b/googleapiclient/__init__.py
index 184219af34d..0cbe2c3f65f 100644
--- a/googleapiclient/__init__.py
+++ b/googleapiclient/__init__.py
@@ -12,7 +12,7 @@
 # See the License for the specific language governing permissions and
 # limitations under the License.
 
-__version__ = "1.6.4"
+__version__ = "1.6.5"
 
 # Set default logging handler to avoid "No handler found" warnings.
 import logging