diff --git a/docs/source/changelog.md b/docs/source/changelog.md
index 45bd178a17..04e17f040f 100644
--- a/docs/source/changelog.md
+++ b/docs/source/changelog.md
@@ -14,6 +14,9 @@ changes in pull requests], this list should be updated.
 
 - Update jupyterhub from 4.1.6 to 5.1.0 [#3405](https://github.com/jupyterhub/zero-to-jupyterhub-k8s/pull/3405), [#3416](https://github.com/jupyterhub/zero-to-jupyterhub-k8s/pull/3416), [#3425](https://github.com/jupyterhub/zero-to-jupyterhub-k8s/pull/3425), [#3472](https://github.com/jupyterhub/zero-to-jupyterhub-k8s/pull/3472)
 - Drop support for k8s 1.23-1.27, require k8s 1.28+ [#3312](https://github.com/jupyterhub/zero-to-jupyterhub-k8s/pull/3312), [#3403](https://github.com/jupyterhub/zero-to-jupyterhub-k8s/pull/3403), [#3319](https://github.com/jupyterhub/zero-to-jupyterhub-k8s/pull/3319), [#3508](https://github.com/jupyterhub/zero-to-jupyterhub-k8s/pull/3508)
+- `oauthenticator` is upgraded a major version from 16.3.1 to 17.0.0, please
+  read [OAuthenticator's changelog] if you are using one if its authenticator
+  classes [#3519](https://github.com/jupyterhub/zero-to-jupyterhub-k8s/pull/3519)
 
 ## 3.3
 
diff --git a/images/hub/requirements.txt b/images/hub/requirements.txt
index 50cef2cad5..a8c32fee80 100644
--- a/images/hub/requirements.txt
+++ b/images/hub/requirements.txt
@@ -117,7 +117,7 @@ mwoauth==0.4.0
     # via -r requirements.in
 nullauthenticator==1.0.0
     # via -r requirements.in
-oauthenticator==16.3.1
+oauthenticator==17.0.0
     # via -r requirements.in
 oauthlib==3.2.2
     # via