diff --git a/CHANGELOG.md b/CHANGELOG.md
index 2b3c69be..7b4e7a99 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -14,6 +14,8 @@
 
 ## Changes since v3.2.0
 
+- [#175](https://github.com/pusher/outh2_proxy/pull/175) Bump go-oidc to v2.0.0 (@aeijdenberg).
+  - Includes fix for potential signature checking issue when OIDC discovery is skipped.
 - [#168](https://github.com/pusher/outh2_proxy/pull/168) Drop Go 1.11 support in Travis (@JoelSpeed)
 - [#169](https://github.com/pusher/outh2_proxy/pull/169) Update Alpine to 3.9 (@kskewes)
 - [#148](https://github.com/pusher/outh2_proxy/pull/148) Implement SessionStore interface within proxy (@JoelSpeed)
diff --git a/Gopkg.lock b/Gopkg.lock
index 01af4d2f..ffbd76ae 100644
--- a/Gopkg.lock
+++ b/Gopkg.lock
@@ -26,12 +26,12 @@
   version = "v0.5.0"
 
 [[projects]]
-  branch = "v2"
-  digest = "1:e5a238f8fa890e529d7e493849bbae8988c9e70344e4630cc4f9a11b00516afb"
+  digest = "1:d8ee1b165eb7f4fd9ada718e1e7eeb0bc1fd462592d0bd823df694443f448681"
   name = "github.com/coreos/go-oidc"
   packages = ["."]
   pruneopts = ""
-  revision = "77e7f2010a464ade7338597afe650dfcffbe2ca8"
+  revision = "1180514eaf4d9f38d0d19eef639a1d695e066e72"
+  version = "v2.0.0"
 
 [[projects]]
   digest = "1:56c130d885a4aacae1dd9c7b71cfe39912c7ebc1ff7d2b46083c8812996dc43b"
diff --git a/Gopkg.toml b/Gopkg.toml
index 732bbcbf..cfb10a71 100644
--- a/Gopkg.toml
+++ b/Gopkg.toml
@@ -12,7 +12,7 @@
   version = "~0.5.0"
 
 [[constraint]]
-  branch = "v2"
+  version = "^2"
   name = "github.com/coreos/go-oidc"
 
 [[constraint]]