diff --git a/CHANGELOG.md b/CHANGELOG.md
index 122f3dcf1a8..c52d3d77a21 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -8,6 +8,43 @@ This project uses [*towncrier*](https://towncrier.readthedocs.io/) and the chang
 
 <!-- towncrier release notes start -->
 
+## [3.128.0](https://github.com/metalbear-co/mirrord/tree/3.128.0) - 2024-12-19
+
+
+### Added
+
+- Added to mirrord config a new experimental field
+  `.experimental.readonly_file_buffer`. If set to a value greater than 0,
+  mirrord will fetch remote readonly files in chunks of at least this size (in bytes).
+  This is to improve performance with applications that make many small reads
+  from remote files.
+  [#2069](https://github.com/metalbear-co/mirrord/issues/2069)
+- Added `mirrord container-ext` command that should be used by extension and
+  works similarly to `mirrord ext` but for containers.
+- Added runAsNonRoot and RO file system to operator deployment
+- Added custom resource definition for cluster-wide mirrord policy -
+  `MirrordClusterPolicy`.
+- Added mapping option for env vars config, allowing the user to map multiple env
+  vars to another value based on regexes.
+  [#2920](https://github.com/metalbear-co/mirrord/issues/2920)
+- Added mkdir support
+  [#2221](https://github.com/metalbear-co/mirrord/issues/2221)
+
+
+### Fixed
+
+- Added debugger port detection type for the node `--inspect`, `--inspect-wait`
+  and `--inspect-brk` flags.
+  [#2936](https://github.com/metalbear-co/mirrord/issues/2936)
+- Fixed `mirrord operator setup` - added missing `/tmp` volume to the operator
+  deployment.
+
+
+### Internal
+
+- Added E2E test for `MirrordClusterPolicy` that blocks incoming traffic
+  mirroring.
+
 ## [3.127.0](https://github.com/metalbear-co/mirrord/tree/3.127.0) - 2024-12-10
 
 
diff --git a/Cargo.lock b/Cargo.lock
index 630f6c223ee..4432a85f53a 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -2410,7 +2410,7 @@ dependencies = [
 
 [[package]]
 name = "fileops"
-version = "3.127.0"
+version = "3.128.0"
 dependencies = [
  "libc",
 ]
@@ -3536,7 +3536,7 @@ checksum = "7943c866cc5cd64cbc25b2e01621d07fa8eb2a1a23160ee81ce38704e97b8ecf"
 
 [[package]]
 name = "issue1317"
-version = "3.127.0"
+version = "3.128.0"
 dependencies = [
  "actix-web",
  "env_logger 0.11.5",
@@ -3546,7 +3546,7 @@ dependencies = [
 
 [[package]]
 name = "issue1776"
-version = "3.127.0"
+version = "3.128.0"
 dependencies = [
  "errno 0.3.10",
  "libc",
@@ -3555,7 +3555,7 @@ dependencies = [
 
 [[package]]
 name = "issue1776portnot53"
-version = "3.127.0"
+version = "3.128.0"
 dependencies = [
  "libc",
  "socket2",
@@ -3563,14 +3563,14 @@ dependencies = [
 
 [[package]]
 name = "issue1899"
-version = "3.127.0"
+version = "3.128.0"
 dependencies = [
  "libc",
 ]
 
 [[package]]
 name = "issue2001"
-version = "3.127.0"
+version = "3.128.0"
 dependencies = [
  "libc",
 ]
@@ -3891,7 +3891,7 @@ checksum = "78b3ae25bc7c8c38cec158d1f2757ee79e9b3740fbc7ccf0e59e4b08d793fa89"
 
 [[package]]
 name = "listen_ports"
-version = "3.127.0"
+version = "3.128.0"
 
 [[package]]
 name = "litemap"
@@ -4119,7 +4119,7 @@ dependencies = [
 
 [[package]]
 name = "mirrord"
-version = "3.127.0"
+version = "3.128.0"
 dependencies = [
  "actix-codec",
  "clap",
@@ -4179,7 +4179,7 @@ dependencies = [
 
 [[package]]
 name = "mirrord-agent"
-version = "3.127.0"
+version = "3.128.0"
 dependencies = [
  "actix-codec",
  "async-trait",
@@ -4235,7 +4235,7 @@ dependencies = [
 
 [[package]]
 name = "mirrord-analytics"
-version = "3.127.0"
+version = "3.128.0"
 dependencies = [
  "assert-json-diff",
  "base64 0.22.1",
@@ -4249,7 +4249,7 @@ dependencies = [
 
 [[package]]
 name = "mirrord-auth"
-version = "3.127.0"
+version = "3.128.0"
 dependencies = [
  "bcder",
  "chrono",
@@ -4270,7 +4270,7 @@ dependencies = [
 
 [[package]]
 name = "mirrord-config"
-version = "3.127.0"
+version = "3.128.0"
 dependencies = [
  "bimap",
  "bitflags 2.6.0",
@@ -4293,7 +4293,7 @@ dependencies = [
 
 [[package]]
 name = "mirrord-config-derive"
-version = "3.127.0"
+version = "3.128.0"
 dependencies = [
  "proc-macro2",
  "proc-macro2-diagnostics",
@@ -4303,7 +4303,7 @@ dependencies = [
 
 [[package]]
 name = "mirrord-console"
-version = "3.127.0"
+version = "3.128.0"
 dependencies = [
  "bincode",
  "drain",
@@ -4319,7 +4319,7 @@ dependencies = [
 
 [[package]]
 name = "mirrord-intproxy"
-version = "3.127.0"
+version = "3.128.0"
 dependencies = [
  "bytes",
  "exponential-backoff",
@@ -4350,7 +4350,7 @@ dependencies = [
 
 [[package]]
 name = "mirrord-intproxy-protocol"
-version = "3.127.0"
+version = "3.128.0"
 dependencies = [
  "bincode",
  "mirrord-protocol",
@@ -4360,7 +4360,7 @@ dependencies = [
 
 [[package]]
 name = "mirrord-kube"
-version = "3.127.0"
+version = "3.128.0"
 dependencies = [
  "actix-codec",
  "async-stream",
@@ -4390,7 +4390,7 @@ dependencies = [
 
 [[package]]
 name = "mirrord-layer"
-version = "3.127.0"
+version = "3.128.0"
 dependencies = [
  "actix-codec",
  "base64 0.22.1",
@@ -4440,7 +4440,7 @@ dependencies = [
 
 [[package]]
 name = "mirrord-layer-macro"
-version = "3.127.0"
+version = "3.128.0"
 dependencies = [
  "proc-macro2",
  "quote",
@@ -4449,7 +4449,7 @@ dependencies = [
 
 [[package]]
 name = "mirrord-macros"
-version = "3.127.0"
+version = "3.128.0"
 dependencies = [
  "proc-macro2",
  "proc-macro2-diagnostics",
@@ -4459,7 +4459,7 @@ dependencies = [
 
 [[package]]
 name = "mirrord-operator"
-version = "3.127.0"
+version = "3.128.0"
 dependencies = [
  "base64 0.22.1",
  "bincode",
@@ -4493,7 +4493,7 @@ dependencies = [
 
 [[package]]
 name = "mirrord-progress"
-version = "3.127.0"
+version = "3.128.0"
 dependencies = [
  "enum_dispatch",
  "indicatif",
@@ -4528,7 +4528,7 @@ dependencies = [
 
 [[package]]
 name = "mirrord-sip"
-version = "3.127.0"
+version = "3.128.0"
 dependencies = [
  "apple-codesign",
  "object 0.36.5",
@@ -4541,7 +4541,7 @@ dependencies = [
 
 [[package]]
 name = "mirrord-vpn"
-version = "3.127.0"
+version = "3.128.0"
 dependencies = [
  "futures",
  "ipnet",
@@ -4891,7 +4891,7 @@ dependencies = [
 
 [[package]]
 name = "outgoing"
-version = "3.127.0"
+version = "3.128.0"
 
 [[package]]
 name = "outref"
@@ -5976,14 +5976,14 @@ dependencies = [
 
 [[package]]
 name = "rust-bypassed-unix-socket"
-version = "3.127.0"
+version = "3.128.0"
 dependencies = [
  "tokio",
 ]
 
 [[package]]
 name = "rust-e2e-fileops"
-version = "3.127.0"
+version = "3.128.0"
 dependencies = [
  "libc",
 ]
@@ -5999,7 +5999,7 @@ dependencies = [
 
 [[package]]
 name = "rust-unix-socket-client"
-version = "3.127.0"
+version = "3.128.0"
 dependencies = [
  "tokio",
 ]
diff --git a/Cargo.toml b/Cargo.toml
index 11f578c8c28..da8a4e788d0 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -27,7 +27,7 @@ resolver = "2"
 
 # latest commits on rustls suppress certificate verification
 [workspace.package]
-version = "3.127.0"
+version = "3.128.0"
 edition = "2021"
 license = "MIT"
 readme = "README.md"
diff --git a/changelog.d/+cluster-policy-test.internal.md b/changelog.d/+cluster-policy-test.internal.md
deleted file mode 100644
index 3ac77a3ce02..00000000000
--- a/changelog.d/+cluster-policy-test.internal.md
+++ /dev/null
@@ -1 +0,0 @@
-Added E2E test for `MirrordClusterPolicy` that blocks incoming traffic mirroring.
diff --git a/changelog.d/+cluster-policy.added.md b/changelog.d/+cluster-policy.added.md
deleted file mode 100644
index 2725780086b..00000000000
--- a/changelog.d/+cluster-policy.added.md
+++ /dev/null
@@ -1 +0,0 @@
-Added custom resource definition for cluster-wide mirrord policy - `MirrordClusterPolicy`.
diff --git a/changelog.d/+container-ext.added.md b/changelog.d/+container-ext.added.md
deleted file mode 100644
index cf5c2549dce..00000000000
--- a/changelog.d/+container-ext.added.md
+++ /dev/null
@@ -1 +0,0 @@
-Add `mirrord container-ext` command that should be used by extension and works similarly to `mirrord ext` but for containers.
diff --git a/changelog.d/+operator-deployment-strict.added.md b/changelog.d/+operator-deployment-strict.added.md
deleted file mode 100644
index a72b1ccd58a..00000000000
--- a/changelog.d/+operator-deployment-strict.added.md
+++ /dev/null
@@ -1 +0,0 @@
-Add runAsNonRoot and RO file system to operator deployment
diff --git a/changelog.d/+operator-tmp-volume.fixed.md b/changelog.d/+operator-tmp-volume.fixed.md
deleted file mode 100644
index db28de877e5..00000000000
--- a/changelog.d/+operator-tmp-volume.fixed.md
+++ /dev/null
@@ -1 +0,0 @@
-Fixed `mirrord operator setup` - added missing `/tmp` volume to the operator deployment.
diff --git a/changelog.d/2069.added.md b/changelog.d/2069.added.md
deleted file mode 100644
index f8efa7d3147..00000000000
--- a/changelog.d/2069.added.md
+++ /dev/null
@@ -1,2 +0,0 @@
-Added to mirrord config a new experimental flag `.experimental.buffer_file_reads`. When this flag is enabled, mirrord will fetch remote readonly files in at least 4kb chunks.
-This is to improve performance with applications that make many small reads from remote files.
diff --git a/changelog.d/2221.fixed.md b/changelog.d/2221.fixed.md
deleted file mode 100644
index 13e0ddd0ae8..00000000000
--- a/changelog.d/2221.fixed.md
+++ /dev/null
@@ -1 +0,0 @@
-Add mkdir support
diff --git a/changelog.d/2920.changed.md b/changelog.d/2920.changed.md
deleted file mode 100644
index b03aff8d438..00000000000
--- a/changelog.d/2920.changed.md
+++ /dev/null
@@ -1 +0,0 @@
-Add mapping option for env vars config, allowing the user to map multiple env vars to another value based on regexes.
diff --git a/changelog.d/2936.fixed.md b/changelog.d/2936.fixed.md
deleted file mode 100644
index 56a1c704149..00000000000
--- a/changelog.d/2936.fixed.md
+++ /dev/null
@@ -1 +0,0 @@
-Added debugger port detection type for the node `--inspect`, `--inspect-wait` and `--inspect-brk` flags
\ No newline at end of file