diff --git a/CHANGELOG.md b/CHANGELOG.md
index 30139da83..4d3e5a435 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -2,6 +2,14 @@
 
 ## Unreleased
 
+## 2.19.0 - 2026-11-03
+
+- Rollback: releases before 2.19.0 ignore `reused_recorded_at` on the signal,
+  memo and search-attribute events that a 2.19.0 redrive successor reuses.
+  Replaying such a successor on an older release can change its workflow time
+  and the deadlines derived from it. Once a 2.19.0 redrive successor with
+  reused signal waits or upserts exists, keep 2.19.0 or later workers, or
+  confirm that no such history can replay before rolling back (#864).
 - Redrive a failed run whose workflow code upserted memos or search
   attributes. Before, any `MemoUpserted` or `SearchAttributesUpserted` event
   refused redrive with `unsupported_history`. The successor reuses those
diff --git a/composer.json b/composer.json
index 647ad7916..2f8606794 100644
--- a/composer.json
+++ b/composer.json
@@ -87,7 +87,7 @@
             "dev-main": "2.0.x-dev"
         },
         "durable-workflow": {
-            "product-train": "2.18.0",
+            "product-train": "2.19.0",
             "laravel-embedded-upgrade-contract": "resources/laravel-embedded-upgrade-contract.json",
             "laravel-dependency-security-policy": "resources/laravel-dependency-security-policy.json"
         },