diff --git a/.versionbot/CHANGELOG.yml b/.versionbot/CHANGELOG.yml
index 19edb60..b340bf3 100644
--- a/.versionbot/CHANGELOG.yml
+++ b/.versionbot/CHANGELOG.yml
@@ -1,3 +1,60 @@
+- commits:
+    - subject: Update layers/meta-balena to 146e74b5bc28ae5ed734835a4d5a71cb974f51c6
+      hash: 3e6d7018aca932f832c10b1f57f2d02a9a4d3e4d
+      body: Update layers/meta-balena
+      footer:
+        Changelog-entry: Update layers/meta-balena to 146e74b5bc28ae5ed734835a4d5a71cb974f51c6
+        changelog-entry: Update layers/meta-balena to 146e74b5bc28ae5ed734835a4d5a71cb974f51c6
+      author: Self-hosted Renovate Bot
+      nested:
+        - commits:
+            - subject: ".github/workflows: Replace GitHub PAT with ephemeral app tokens"
+              hash: d62f8a2d4450b588147c3065e1437af741185418
+              body: |
+                GitHub App installation tokens are short-lived and do not
+                need to be rotated the same way PATs do.
+
+                The default app ID and installation ID correspond to
+                flowzone-bot[app] installed in the balena-os Org.
+              footer:
+                Change-type: patch
+                change-type: patch
+                Signed-off-by: Kyle Harding <kyle@balena.io>
+                signed-off-by: Kyle Harding <kyle@balena.io>
+              author: Kyle Harding
+              nested: []
+          version: meta-balena-3.0.11
+          title: ""
+          date: 2023-07-14T12:47:33.615Z
+        - commits:
+            - subject: "initrdscripts: make initramfs-module-cryptsetup pull libgcc in"
+              hash: 046a17ec1494fe15da45e3accb1de562ff7e976e
+              body: >
+                cryptsetup lazily depends on libgcc. With libgcc missing,
+                certain
+
+                operations, especially luksOpen will fail with
+
+                `libgcc_s.so.1 must be installed for pthread_exit to work`
+
+                which panics the kernel and triggers a reboot loop indistinguishable
+
+                from a "device has been tampered with" state on regular builds
+
+                with no console output.
+              footer:
+                Change-type: patch
+                change-type: patch
+                Signed-off-by: Michal Toman <michalt@balena.io>
+                signed-off-by: Michal Toman <michalt@balena.io>
+              author: Michal Toman
+              nested: []
+          version: meta-balena-3.0.10
+          title: ""
+          date: 2023-07-14T11:06:57.107Z
+  version: 3.0.11
+  title: ""
+  date: 2023-07-14T16:27:53.117Z
 - commits:
     - subject: Update layers/meta-balena to cd6d6ef437a25ada9a03029367e3b6f36c2b4f6d
       hash: 694e2baac5ddbcfe690f418a4a7b0d249ae59415
diff --git a/CHANGELOG.md b/CHANGELOG.md
index a0d4443..33f7ba4 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,6 +1,26 @@
 Change log
 -----------
 
+# v3.0.11
+## (2023-07-14)
+
+
+<details>
+<summary> Update layers/meta-balena to 146e74b5bc28ae5ed734835a4d5a71cb974f51c6 [Self-hosted Renovate Bot] </summary>
+
+> ## meta-balena-3.0.11
+> ### (2023-07-14)
+> 
+> * .github/workflows: Replace GitHub PAT with ephemeral app tokens [Kyle Harding]
+> 
+> ## meta-balena-3.0.10
+> ### (2023-07-14)
+> 
+> * initrdscripts: make initramfs-module-cryptsetup pull libgcc in [Michal Toman]
+> 
+
+</details>
+
 # v3.0.9
 ## (2023-07-13)
 
diff --git a/VERSION b/VERSION
index 489200c..e4a0720 100644
--- a/VERSION
+++ b/VERSION
@@ -1 +1 @@
-3.0.9
\ No newline at end of file
+3.0.11
\ No newline at end of file