update CHANGELOG and bump version number