diff --git a/CHANGELOG.md b/CHANGELOG.md
index cacab28..04f49fb 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,24 +3,33 @@
 All notable changes to this repository are documented here.
 Generated by git-cliff from Conventional Commits; do not edit this file by hand.
 
-## [Unreleased]
+## [dsh-v0.2.1-rc.3-r3] - 2026-10-25
 
 ### Added
 
 - **gateway-api:** Expose dsh-gateway externally via Traefik Gateway API (#12) (7d3faf0)
 - **gateway-api:** GitHub SSO via oauth2-proxy in front of dsh-gateway (#13) (3f46279)
 - **gateway:** SSO landing auto-connects and offers recreate sandbox (#15) (ed1398d)
-- **repo:** Restructure around the dsh-harness image and one example per implementation (e6e109d)
+- **repo:** Repo reorganization (#16) (3b70f17)
 
 ### Fixed
 
 - **Dockerfile:** Update runtime dependencies and enable corepack for pnpm (6d97f61)
 - **gateway-api:** Correct oauth2-proxy cookie-secret generation (#14) (73a65d9)
 
+### Maintenance
+
+- Bump the actions group across 1 directory with 3 updates (#17) (6a8fe54)
+
 ### Other
 
 - Dockerfile extra tools (2b47afa)
 - Modify gateway.yaml for image policy and timeout values (53e55fc)
+- Add commit message prefix for Dependabot updates (6876871)
+- Versioning update (#18) (ecba8b9)
+- Refactor environment variable loading in build workflow (d627526)
+- Refactor environment variable loading in build-gateway.yaml (027f74f)
+- Refactor release workflow for environment variable sourcing (958cbe2)
 
 ## [v0.0.1] - 2026-10-21