diff --git a/CHANGELOG.v2.alpha.md b/CHANGELOG.v2.alpha.md
index 46733a68988de..90ebdaaca2176 100644
--- a/CHANGELOG.v2.alpha.md
+++ b/CHANGELOG.v2.alpha.md
@@ -2,6 +2,25 @@
 
 All notable changes to this project will be documented in this file. See [standard-version](https://github.com/conventional-changelog/standard-version) for commit guidelines.
 
+## [2.128.0-alpha.0](https://github.com/aws/aws-cdk/compare/v2.127.0-alpha.0...v2.128.0-alpha.0) (2024-02-14)
+
+
+### ⚠ BREAKING CHANGES TO EXPERIMENTAL FEATURES
+
+* **app-staging-synthesizer-alpha:** `stagingBucketEncryption` property is now required. For existing apps, specify `BucketEncryption.KMS` to retain existing behavior. For new apps, choose the bucket encryption that makes most sense for your use case. `BucketEncryption.S3_MANAGED` is available and is intended to be the default when this module is stabilized.
+
+### Features
+
+* **app-staging-synthesizer-alpha:** require passing `stagingBucketEncryption` and note that we intend to default to `S3_MANAGED` in the future ([#28978](https://github.com/aws/aws-cdk/issues/28978)) ([fc8b955](https://github.com/aws/aws-cdk/commit/fc8b95528f97704588329abaa33cf45b07273b9e)), closes [#28815](https://github.com/aws/aws-cdk/issues/28815) [#28903](https://github.com/aws/aws-cdk/issues/28903) [/github.com/aws/aws-cdk/pull/28978#issuecomment-1930007176](https://github.com/aws//github.com/aws/aws-cdk/pull/28978/issues/issuecomment-1930007176)
+* **pipes-enrichments:** new EventBridge Pipes enrichments alpha module ([#29063](https://github.com/aws/aws-cdk/issues/29063)) ([5a54ec5](https://github.com/aws/aws-cdk/commit/5a54ec5923eaf580b32184a84caed118945e3f6d))
+* **pipes-targets:** new EventBridge Pipes targets alpha module  ([#29057](https://github.com/aws/aws-cdk/issues/29057)) ([9419f54](https://github.com/aws/aws-cdk/commit/9419f547569ef7ec4c8b9de19498cb10b3d6c30c))
+* **scheduler-targets-alpha:** `SageMakerStartPipelineExecution` Target ([#28927](https://github.com/aws/aws-cdk/issues/28927)) ([db260b0](https://github.com/aws/aws-cdk/commit/db260b091b6328b36cd8a541a5ab55048839daa6)), closes [#27457](https://github.com/aws/aws-cdk/issues/27457)
+
+
+### Bug Fixes
+
+* **appconfig:** deployment recreated on every cdk deployment ([#28782](https://github.com/aws/aws-cdk/issues/28782)) ([a21731c](https://github.com/aws/aws-cdk/commit/a21731c9b1f34525433fbee668ebb2321debf5b8))
+
 ## [2.127.0-alpha.0](https://github.com/aws/aws-cdk/compare/v2.126.0-alpha.0...v2.127.0-alpha.0) (2024-02-09)
 
 
diff --git a/CHANGELOG.v2.md b/CHANGELOG.v2.md
index 017fd9d558e26..365cffa9569fc 100644
--- a/CHANGELOG.v2.md
+++ b/CHANGELOG.v2.md
@@ -2,6 +2,23 @@
 
 All notable changes to this project will be documented in this file. See [standard-version](https://github.com/conventional-changelog/standard-version) for commit guidelines.
 
+## [2.128.0](https://github.com/aws/aws-cdk/compare/v2.127.0...v2.128.0) (2024-02-14)
+
+
+### Features
+
+* **cloudwatch:** add `TableWidget` ([#29078](https://github.com/aws/aws-cdk/issues/29078)) ([4599aa3](https://github.com/aws/aws-cdk/commit/4599aa3c4502e5e5e5fb7434913f7ce9a6468547)), closes [#28975](https://github.com/aws/aws-cdk/issues/28975)
+* **codedeploy:** ignoreAlarmConfiguration parameter to Deployment Groups ([#26957](https://github.com/aws/aws-cdk/issues/26957)) ([e890e89](https://github.com/aws/aws-cdk/commit/e890e89e9fbe46c9f93ef2a16c26bd9a06694ca6))
+* **codepipeline:** pipeline type v2 with pipeline-level variables and triggers ([#28538](https://github.com/aws/aws-cdk/issues/28538)) ([40ffe2b](https://github.com/aws/aws-cdk/commit/40ffe2ba8c3cd46d4096bbb93210d4aa6952953c)), closes [#28476](https://github.com/aws/aws-cdk/issues/28476) [#28694](https://github.com/aws/aws-cdk/issues/28694)
+* **ses:** `grant` methods to `IEmailIdentity` ([#29084](https://github.com/aws/aws-cdk/issues/29084)) ([c3c771c](https://github.com/aws/aws-cdk/commit/c3c771c6f6f6790f2298a85a549bded640d2e35b)), closes [#29083](https://github.com/aws/aws-cdk/issues/29083)
+* allow overriding the filename of the processed file after substitution ([#29029](https://github.com/aws/aws-cdk/issues/29029)) ([88decc6](https://github.com/aws/aws-cdk/commit/88decc6060732a6e2c1dd4b349b62c6df849ff07)), closes [#28450](https://github.com/aws/aws-cdk/issues/28450)
+
+
+### Bug Fixes
+
+* **lambda:** @deprecated tag to deprecated runtimes ([#29081](https://github.com/aws/aws-cdk/issues/29081)) ([2503f68](https://github.com/aws/aws-cdk/commit/2503f6855b6b0dad73c6fafc51f81f66354e2822))
+* **stepfunctions-tasks:** missing permissions for running tasks on ecs ([#27891](https://github.com/aws/aws-cdk/issues/27891)) ([683d595](https://github.com/aws/aws-cdk/commit/683d5958b91747cedd746b96845a2169411d847a)), closes [#27803](https://github.com/aws/aws-cdk/issues/27803)
+
 ## [2.127.0](https://github.com/aws/aws-cdk/compare/v2.126.0...v2.127.0) (2024-02-09)
 
 ### Features
diff --git a/version.v2.json b/version.v2.json
index c653abe76bc2f..32e1df69cccd2 100644
--- a/version.v2.json
+++ b/version.v2.json
@@ -1,4 +1,4 @@
 {
-  "version": "2.127.0",
-  "alphaVersion": "2.127.0-alpha.0"
+  "version": "2.128.0",
+  "alphaVersion": "2.128.0-alpha.0"
 }
\ No newline at end of file