diff --git a/v1/bootstrapping.md b/v1/bootstrapping.md
index cf9089a1..69ca4896 100644
--- a/v1/bootstrapping.md
+++ b/v1/bootstrapping.md
@@ -627,4 +627,5 @@ The bootstrap template is versioned and evolves over time with the AWS CDK itsel
 | 6 | 1\.109\.0 | Attach aws\-cdk:bootstrap\-role tag to deployment, file publishing, and image publishing roles\.  | 
 | 7 | 1\.110\.0 | Deployment role can no longer read Buckets in the target account directly \(however, this role is effectively an administrator, and could always use its AWS CloudFormation permissions to make the bucket readable anyway\)\. | 
 | 8 | 1\.114\.0 | The lookup role has full read\-only permissions to the target environment, and has a aws\-cdk:bootstrap\-role tag as well\. | 
-| 9 | 1\.135\.0 | Fixes S3 asset uploads from being rejected by commonly referenced encryption SCP\. | 
\ No newline at end of file
+| 9 | 1\.135\.0 | Fixes S3 asset uploads from being rejected by commonly referenced encryption SCP\. | 
+| 10 | 1\.139\.0 | ECR ScanOnPush is now enabled by default. | 
diff --git a/v2/bootstrapping.md b/v2/bootstrapping.md
index 6164659b..6b9732ef 100644
--- a/v2/bootstrapping.md
+++ b/v2/bootstrapping.md
@@ -555,4 +555,5 @@ The bootstrap template is versioned and evolves over time with the AWS CDK itsel
 | 6 | 1\.109\.0 | Attach aws\-cdk:bootstrap\-role tag to deployment, file publishing, and image publishing roles\.  | 
 | 7 | 1\.110\.0 | Deployment role can no longer read Buckets in the target account directly \(however, this role is effectively an administrator, and could always use its AWS CloudFormation permissions to make the bucket readable anyway\)\. | 
 | 8 | 1\.114\.0 | The lookup role has full read\-only permissions to the target environment, and has a aws\-cdk:bootstrap\-role tag as well\. | 
-| 9 | 2\.1\.0 | Fixes S3 asset uploads from being rejected by commonly referenced encryption SCP\. | 
\ No newline at end of file
+| 9 | 2\.1\.0 | Fixes S3 asset uploads from being rejected by commonly referenced encryption SCP\. | 
+| 10 | 2\.4\.0 | ECR ScanOnPush is now enabled by default. |