diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
index 3aa63ead417..34c2bcaa9f1 100644
--- a/.github/workflows/ci.yaml
+++ b/.github/workflows/ci.yaml
@@ -562,7 +562,7 @@ jobs:
   # building concurrently can run faster the release ide tests
   build_mirrord_on_release_branch:
     runs-on: ubuntu-24.04
-    name: build mirrord
+    name: build mirrord CLI
     needs: check_if_release_branch
     if: ${{ needs.check_if_release_branch.outputs.release_branch == 'true' }}
     steps:
@@ -571,8 +571,8 @@ jobs:
         with:
           repo-token: ${{ secrets.GITHUB_TOKEN }}
       - uses: actions-rust-lang/setup-rust-toolchain@v1
-      - run: cargo build --manifest-path=./Cargo.toml
-      - name: upload layer
+      - run: cargo build --manifest-path=./Cargo.toml -p mirrord
+      - name: upload mirrord CLI
         uses: actions/upload-artifact@v4
         with:
           name: mirrord-artifacts
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 362ba2701a9..2b197046f0d 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -8,6 +8,43 @@ This project uses [*towncrier*](https://towncrier.readthedocs.io/) and the chang
 
 <!-- towncrier release notes start -->
 
+## [3.121.0](https://github.com/metalbear-co/mirrord/tree/3.121.0) - 2024-10-17
+
+
+### Added
+
+- Added support for Istio CNI
+  [#2851](https://github.com/metalbear-co/mirrord/issues/2851)
+- Added `nodeSelector` option to agent config.
+
+
+### Changed
+
+- Allowed filtered steal requests to be retried when we get a Reset from
+  hyper(h2).
+
+
+### Fixed
+
+- Fixed an issue where `mirrord exec ... -- npm run serve` in a Vue project was
+  failing with `EAFNOSUPPORT: address family not supported ::1:80`. Added new
+  `.experimental.hide_ipv6_interfaces` configuration entry that allows for
+  hiding local IPv6 interface addresses from the user application.
+  [#2807](https://github.com/metalbear-co/mirrord/issues/2807)
+- Fixed wrong warning being displayed when binding UDP port 0 and filtering HTTP.
+  [#2812](https://github.com/metalbear-co/mirrord/issues/2812)
+- mirrord now respects `insecure-skip-tls-verify` option set in the kubeconfig
+  when `accept_invalid_certificates` is not provided in the mirrord config.
+  [#2825](https://github.com/metalbear-co/mirrord/issues/2825)
+
+
+### Internal
+
+- Downgraded Rust toochain to nightly-2024-09-12.
+  [#downgrade-rust](https://github.com/metalbear-co/mirrord/issues/downgrade-rust)
+- Added integration (regression) test for binding port 0 twice.
+  [#2812](https://github.com/metalbear-co/mirrord/issues/2812)
+
 ## [3.120.1](https://github.com/metalbear-co/mirrord/tree/3.120.1) - 2024-10-14
 
 
diff --git a/Cargo.lock b/Cargo.lock
index bc57e32b33a..3cef4580e36 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -2363,7 +2363,7 @@ dependencies = [
 
 [[package]]
 name = "fileops"
-version = "3.120.1"
+version = "3.121.0"
 dependencies = [
  "libc",
 ]
@@ -3383,7 +3383,7 @@ checksum = "7943c866cc5cd64cbc25b2e01621d07fa8eb2a1a23160ee81ce38704e97b8ecf"
 
 [[package]]
 name = "issue1317"
-version = "3.120.1"
+version = "3.121.0"
 dependencies = [
  "actix-web",
  "env_logger 0.11.5",
@@ -3393,7 +3393,7 @@ dependencies = [
 
 [[package]]
 name = "issue1776"
-version = "3.120.1"
+version = "3.121.0"
 dependencies = [
  "errno 0.3.9",
  "libc",
@@ -3402,7 +3402,7 @@ dependencies = [
 
 [[package]]
 name = "issue1776portnot53"
-version = "3.120.1"
+version = "3.121.0"
 dependencies = [
  "libc",
  "socket2",
@@ -3410,14 +3410,14 @@ dependencies = [
 
 [[package]]
 name = "issue1899"
-version = "3.120.1"
+version = "3.121.0"
 dependencies = [
  "libc",
 ]
 
 [[package]]
 name = "issue2001"
-version = "3.120.1"
+version = "3.121.0"
 dependencies = [
  "libc",
 ]
@@ -3749,7 +3749,7 @@ checksum = "78b3ae25bc7c8c38cec158d1f2757ee79e9b3740fbc7ccf0e59e4b08d793fa89"
 
 [[package]]
 name = "listen_ports"
-version = "3.120.1"
+version = "3.121.0"
 
 [[package]]
 name = "local-channel"
@@ -3987,7 +3987,7 @@ checksum = "c9be0862c1b3f26a88803c4a49de6889c10e608b3ee9344e6ef5b45fb37ad3d1"
 
 [[package]]
 name = "mirrord"
-version = "3.120.1"
+version = "3.121.0"
 dependencies = [
  "actix-codec",
  "clap",
@@ -4042,7 +4042,7 @@ dependencies = [
 
 [[package]]
 name = "mirrord-agent"
-version = "3.120.1"
+version = "3.121.0"
 dependencies = [
  "actix-codec",
  "async-trait",
@@ -4099,7 +4099,7 @@ dependencies = [
 
 [[package]]
 name = "mirrord-analytics"
-version = "3.120.1"
+version = "3.121.0"
 dependencies = [
  "assert-json-diff",
  "base64 0.22.1",
@@ -4113,7 +4113,7 @@ dependencies = [
 
 [[package]]
 name = "mirrord-auth"
-version = "3.120.1"
+version = "3.121.0"
 dependencies = [
  "bcder",
  "chrono",
@@ -4134,7 +4134,7 @@ dependencies = [
 
 [[package]]
 name = "mirrord-config"
-version = "3.120.1"
+version = "3.121.0"
 dependencies = [
  "bimap",
  "bitflags 2.6.0",
@@ -4157,7 +4157,7 @@ dependencies = [
 
 [[package]]
 name = "mirrord-config-derive"
-version = "3.120.1"
+version = "3.121.0"
 dependencies = [
  "proc-macro2",
  "proc-macro2-diagnostics",
@@ -4167,7 +4167,7 @@ dependencies = [
 
 [[package]]
 name = "mirrord-console"
-version = "3.120.1"
+version = "3.121.0"
 dependencies = [
  "bincode",
  "drain",
@@ -4183,7 +4183,7 @@ dependencies = [
 
 [[package]]
 name = "mirrord-intproxy"
-version = "3.120.1"
+version = "3.121.0"
 dependencies = [
  "bytes",
  "exponential-backoff",
@@ -4213,7 +4213,7 @@ dependencies = [
 
 [[package]]
 name = "mirrord-intproxy-protocol"
-version = "3.120.1"
+version = "3.121.0"
 dependencies = [
  "bincode",
  "mirrord-protocol",
@@ -4223,7 +4223,7 @@ dependencies = [
 
 [[package]]
 name = "mirrord-kube"
-version = "3.120.1"
+version = "3.121.0"
 dependencies = [
  "actix-codec",
  "async-stream",
@@ -4253,7 +4253,7 @@ dependencies = [
 
 [[package]]
 name = "mirrord-layer"
-version = "3.120.1"
+version = "3.121.0"
 dependencies = [
  "actix-codec",
  "base64 0.22.1",
@@ -4302,7 +4302,7 @@ dependencies = [
 
 [[package]]
 name = "mirrord-layer-macro"
-version = "3.120.1"
+version = "3.121.0"
 dependencies = [
  "proc-macro2",
  "quote",
@@ -4311,7 +4311,7 @@ dependencies = [
 
 [[package]]
 name = "mirrord-macros"
-version = "3.120.1"
+version = "3.121.0"
 dependencies = [
  "proc-macro2",
  "proc-macro2-diagnostics",
@@ -4321,7 +4321,7 @@ dependencies = [
 
 [[package]]
 name = "mirrord-operator"
-version = "3.120.1"
+version = "3.121.0"
 dependencies = [
  "base64 0.22.1",
  "bincode",
@@ -4355,7 +4355,7 @@ dependencies = [
 
 [[package]]
 name = "mirrord-progress"
-version = "3.120.1"
+version = "3.121.0"
 dependencies = [
  "enum_dispatch",
  "indicatif",
@@ -4389,7 +4389,7 @@ dependencies = [
 
 [[package]]
 name = "mirrord-sip"
-version = "3.120.1"
+version = "3.121.0"
 dependencies = [
  "apple-codesign",
  "object 0.36.5",
@@ -4402,7 +4402,7 @@ dependencies = [
 
 [[package]]
 name = "mirrord-vpn"
-version = "3.120.1"
+version = "3.121.0"
 dependencies = [
  "futures",
  "ipnet",
@@ -4732,7 +4732,7 @@ dependencies = [
 
 [[package]]
 name = "outgoing"
-version = "3.120.1"
+version = "3.121.0"
 
 [[package]]
 name = "outref"
@@ -5789,14 +5789,14 @@ dependencies = [
 
 [[package]]
 name = "rust-bypassed-unix-socket"
-version = "3.120.1"
+version = "3.121.0"
 dependencies = [
  "tokio",
 ]
 
 [[package]]
 name = "rust-e2e-fileops"
-version = "3.120.1"
+version = "3.121.0"
 dependencies = [
  "libc",
 ]
@@ -5812,7 +5812,7 @@ dependencies = [
 
 [[package]]
 name = "rust-unix-socket-client"
-version = "3.120.1"
+version = "3.121.0"
 dependencies = [
  "tokio",
 ]
diff --git a/Cargo.toml b/Cargo.toml
index f67629c7aeb..e40872e7460 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -27,7 +27,7 @@ resolver = "2"
 
 # latest commits on rustls suppress certificate verification
 [workspace.package]
-version = "3.120.1"
+version = "3.121.0"
 edition = "2021"
 license = "MIT"
 readme = "README.md"
diff --git a/changelog.d/+649-gogrpc-retry-fix.changed.md b/changelog.d/+649-gogrpc-retry-fix.changed.md
deleted file mode 100644
index 329ef73637e..00000000000
--- a/changelog.d/+649-gogrpc-retry-fix.changed.md
+++ /dev/null
@@ -1 +0,0 @@
-Allows filtered steal requests to be retried when we get a Reset from hyper(h2).
\ No newline at end of file
diff --git a/changelog.d/+nodeselector.added.md b/changelog.d/+nodeselector.added.md
deleted file mode 100644
index 31fb793b301..00000000000
--- a/changelog.d/+nodeselector.added.md
+++ /dev/null
@@ -1 +0,0 @@
-Add nodeSelector option to agent config
diff --git a/changelog.d/+removed-debug-warning.fixed.md b/changelog.d/+removed-debug-warning.fixed.md
deleted file mode 100644
index 59b07a41827..00000000000
--- a/changelog.d/+removed-debug-warning.fixed.md
+++ /dev/null
@@ -1 +0,0 @@
-Removed unnecessary debug warning from mirrord CLI progress.
diff --git a/changelog.d/+update-rust.changed.md b/changelog.d/+update-rust.changed.md
deleted file mode 100644
index 36cd3bf9c6b..00000000000
--- a/changelog.d/+update-rust.changed.md
+++ /dev/null
@@ -1 +0,0 @@
-update rust to 10-10-2024
\ No newline at end of file
diff --git a/changelog.d/2807.fixed.md b/changelog.d/2807.fixed.md
deleted file mode 100644
index 3dbcfc1b8f2..00000000000
--- a/changelog.d/2807.fixed.md
+++ /dev/null
@@ -1 +0,0 @@
-Fixed an issue where `mirrord exec ... -- npm run serve` in a Vue project was failing with `EAFNOSUPPORT: address family not supported ::1:80`. Added new `.experimental.hide_ipv6_interfaces` configuration entry that allows for hiding local IPv6 interface addresses from the user application.
diff --git a/changelog.d/2812.fixed.md b/changelog.d/2812.fixed.md
deleted file mode 100644
index a15b229babe..00000000000
--- a/changelog.d/2812.fixed.md
+++ /dev/null
@@ -1 +0,0 @@
-Wrong warning displayed when binding UDP port 0 and filtering HTTP.
diff --git a/changelog.d/2812.internal.md b/changelog.d/2812.internal.md
deleted file mode 100644
index d1a665b2d47..00000000000
--- a/changelog.d/2812.internal.md
+++ /dev/null
@@ -1 +0,0 @@
-Add integration (regression) test for binding port 0 twice.
diff --git a/changelog.d/2825.fixed.md b/changelog.d/2825.fixed.md
deleted file mode 100644
index 9e95aefb754..00000000000
--- a/changelog.d/2825.fixed.md
+++ /dev/null
@@ -1 +0,0 @@
-mirrord now respects `insecure-skip-tls-verify` option set in the kubeconfig when `accept_invalid_certificates` is not provided in the mirrord config.
diff --git a/changelog.d/2851.added.md b/changelog.d/2851.added.md
deleted file mode 100644
index 6fd1fd8a510..00000000000
--- a/changelog.d/2851.added.md
+++ /dev/null
@@ -1 +0,0 @@
-Added support for Istio CNI
\ No newline at end of file
diff --git a/changelog.d/downgrade-rust.internal.md b/changelog.d/downgrade-rust.internal.md
deleted file mode 100644
index 6d501cabac8..00000000000
--- a/changelog.d/downgrade-rust.internal.md
+++ /dev/null
@@ -1 +0,0 @@
-Downgrade rust toochain to nightly-2024-09-12.