diff --git a/.versionbot/CHANGELOG.yml b/.versionbot/CHANGELOG.yml
index 93d29a0..bdfa1a8 100644
--- a/.versionbot/CHANGELOG.yml
+++ b/.versionbot/CHANGELOG.yml
@@ -1,3 +1,108 @@
+- commits:
+    - subject: Update layers/meta-balena to 90dd8d13b6e4015fa4fb8a3407ddf37eab443cd6
+      hash: 5105b3e7a778490843071fabb667b43de1ed686f
+      body: Update layers/meta-balena
+      footer:
+        Changelog-entry: Update layers/meta-balena to 90dd8d13b6e4015fa4fb8a3407ddf37eab443cd6
+        changelog-entry: Update layers/meta-balena to 90dd8d13b6e4015fa4fb8a3407ddf37eab443cd6
+      author: Renovate Bot
+      nested:
+        - commits:
+            - subject: "hostapp-update-hooks: use unsafe fatrw copy for bootfiles"
+              hash: 71d1fa57f88e73a39cc95cca41ee148c0a2bd8c7
+              body: >
+                A safe copy would only work for files that are read by fatrw
+                also and that is
+
+                not the case for boot files. Still, some file like `config.json` would
+
+                benefit from a safe copy so we still try that first.
+
+
+                Fixes #2998
+              footer:
+                Change-type: patch
+                change-type: patch
+                Signed-off-by: Alex Gonzalez <alexg@balena.io>
+                signed-off-by: Alex Gonzalez <alexg@balena.io>
+              author: Alex Gonzalez
+              nested: []
+            - subject: "balena-config-vars: introduce unsafe fatrw copy"
+              hash: df43a753c7d191b715101fd107da93fcdb7085cb
+              body: >
+                If a safe copy is preferred but non-critical, the unsafe fatrw
+                command
+
+                can be used and if fatrw does not have enough resources to make a safe
+
+                copy it will fallback to a standard cp.
+
+
+                This is useful when performing hostOS updates for example where a safe
+
+                copy would only work for files that are read by fatrw also and that is
+
+                not the case for boot files for example.
+              footer:
+                Change-type: patch
+                change-type: patch
+                Signed-off-by: Alex Gonzalez <alexg@balena.io>
+                signed-off-by: Alex Gonzalez <alexg@balena.io>
+              author: Alex Gonzalez
+              nested: []
+          version: meta-balena-2.114.13
+          title: ""
+          date: 2023-04-27T12:25:49.566Z
+        - commits:
+            - subject: "classes: kernel-balena: force recompilation if signing variables
+                change"
+              hash: ed976cd342d7f70236a683bdf179a8490862f747
+              body: >
+                If they signing variables change, we need to rebuild and resign
+                kernel
+
+                and modules.
+              footer:
+                Change-type: patch
+                change-type: patch
+                Signed-off-by: Alex Gonzalez <alexg@balena.io>
+                signed-off-by: Alex Gonzalez <alexg@balena.io>
+              author: Alex Gonzalez
+              nested: []
+            - subject: "balena-keys: make tasks depends on signing variables"
+              hash: 421d737c200915787e5bc6c6829254cf5b4976f1
+              body: >
+                To avoid unneeded rebuilds, just make the actual key fetching
+                tags
+
+                depend on the signing variables.
+              footer:
+                Change-type: patch
+                change-type: patch
+                Signed-off-by: Alex Gonzalez <alexg@balena.io>
+                signed-off-by: Alex Gonzalez <alexg@balena.io>
+              author: Alex Gonzalez
+              nested: []
+            - subject: "classes: sign: make signing task depends on signing variables"
+              hash: a17f312bea7302577b7c739d57474e9014d4b8d1
+              body: >
+                The signing process order depends on the package to be signed,
+                so let's
+
+                make sure the re-signing happens.
+              footer:
+                Change-type: patch
+                change-type: patch
+                Signed-off-by: Alex Gonzalez <alexg@balena.io>
+                signed-off-by: Alex Gonzalez <alexg@balena.io>
+              author: Alex Gonzalez
+              nested: []
+          version: meta-balena-2.114.12
+          title: ""
+          date: 2023-04-26T10:01:38.568Z
+  version: 2.114.13
+  title: ""
+  date: 2023-04-27T17:45:36.767Z
 - commits:
     - subject: Update contracts to 6c6ed28d459bc48102a69cdf0850d2eb4c778ce7
       hash: 06f9eb5d7fd621b4f4cc67e51b4a1ab5c138e7e6
diff --git a/CHANGELOG.md b/CHANGELOG.md
index b9edad6..8e3237f 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,6 +1,29 @@
 Change log
 -----------
 
+# v2.114.13
+## (2023-04-27)
+
+
+<details>
+<summary> Update layers/meta-balena to 90dd8d13b6e4015fa4fb8a3407ddf37eab443cd6 [Renovate Bot] </summary>
+
+> ## meta-balena-2.114.13
+> ### (2023-04-27)
+> 
+> * hostapp-update-hooks: use unsafe fatrw copy for bootfiles [Alex Gonzalez]
+> * balena-config-vars: introduce unsafe fatrw copy [Alex Gonzalez]
+> 
+> ## meta-balena-2.114.12
+> ### (2023-04-26)
+> 
+> * classes: kernel-balena: force recompilation if signing variables change [Alex Gonzalez]
+> * balena-keys: make tasks depends on signing variables [Alex Gonzalez]
+> * classes: sign: make signing task depends on signing variables [Alex Gonzalez]
+> 
+
+</details>
+
 # v2.114.11+rev1
 ## (2023-04-27)
 
diff --git a/VERSION b/VERSION
index c9942d3..978a98d 100644
--- a/VERSION
+++ b/VERSION
@@ -1 +1 @@
-2.114.11+rev1
\ No newline at end of file
+2.114.13
\ No newline at end of file