diff --git a/CHANGELOG.md b/CHANGELOG.md
index c52d3d77a21..87bf68e74a9 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -8,6 +8,49 @@ This project uses [*towncrier*](https://towncrier.readthedocs.io/) and the chang
 
 <!-- towncrier release notes start -->
 
+## [3.129.0](https://github.com/metalbear-co/mirrord/tree/3.129.0) - 2025-01-14
+
+
+### Added
+
+- Support for stealing incoming connections that are over IPv6.
+  [#2956](https://github.com/metalbear-co/mirrord/issues/2956)
+- mirrord policy to control file ops from the operator.
+- mirrord policy to restrict fetching remote environment variables.
+
+
+### Changed
+
+- Updated how intproxy is outputing logfile when using container mode, now logs
+  will be written on host machine.
+  [#2868](https://github.com/metalbear-co/mirrord/issues/2868)
+- Changed log level for debugger ports detection.
+  [#2986](https://github.com/metalbear-co/mirrord/issues/2986)
+- Readonly file buffering is not enabled by default to improve performance
+  [#3004](https://github.com/metalbear-co/mirrord/issues/3004)
+- Extended docs for HTTP filter in the mirrord config.
+
+
+### Fixed
+
+- Fixed panic when Go >=1.23.3 verifies pidfd support on Linux.
+  [#2988](https://github.com/metalbear-co/mirrord/issues/2988)
+- Fix misleading agent IO operation error that always mentioned getaddrinfo.
+  [#2992](https://github.com/metalbear-co/mirrord/issues/2992)
+- Fixed a bug where port mirroring block (due to active mirrord policies) would
+  terminate the mirrord session.
+
+
+### Internal
+
+- Added lint for unused crate dependencies.
+  [#2843](https://github.com/metalbear-co/mirrord/issues/2843)
+- Fixed fs policy E2E test.
+- Pinned `cargo-chef` version to `0.1.68` in the dockerfiles.
+- Added available namespaces to `mirrord ls` output. New output format is
+  enabled with a flag in an environment variable.
+  [#2999](https://github.com/metalbear-co/mirrord/issues/2999)
+
 ## [3.128.0](https://github.com/metalbear-co/mirrord/tree/3.128.0) - 2024-12-19
 
 
diff --git a/Cargo.lock b/Cargo.lock
index 89528a03ca1..941d424a4c7 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -2400,7 +2400,7 @@ dependencies = [
 
 [[package]]
 name = "fileops"
-version = "3.128.0"
+version = "3.129.0"
 dependencies = [
  "libc",
 ]
@@ -3518,7 +3518,7 @@ checksum = "7943c866cc5cd64cbc25b2e01621d07fa8eb2a1a23160ee81ce38704e97b8ecf"
 
 [[package]]
 name = "issue1317"
-version = "3.128.0"
+version = "3.129.0"
 dependencies = [
  "actix-web",
  "env_logger 0.11.6",
@@ -3528,7 +3528,7 @@ dependencies = [
 
 [[package]]
 name = "issue1776"
-version = "3.128.0"
+version = "3.129.0"
 dependencies = [
  "errno 0.3.10",
  "libc",
@@ -3537,7 +3537,7 @@ dependencies = [
 
 [[package]]
 name = "issue1776portnot53"
-version = "3.128.0"
+version = "3.129.0"
 dependencies = [
  "libc",
  "socket2",
@@ -3545,14 +3545,14 @@ dependencies = [
 
 [[package]]
 name = "issue1899"
-version = "3.128.0"
+version = "3.129.0"
 dependencies = [
  "libc",
 ]
 
 [[package]]
 name = "issue2001"
-version = "3.128.0"
+version = "3.129.0"
 dependencies = [
  "libc",
 ]
@@ -3873,7 +3873,7 @@ checksum = "78b3ae25bc7c8c38cec158d1f2757ee79e9b3740fbc7ccf0e59e4b08d793fa89"
 
 [[package]]
 name = "listen_ports"
-version = "3.128.0"
+version = "3.129.0"
 
 [[package]]
 name = "litemap"
@@ -4114,7 +4114,7 @@ dependencies = [
 
 [[package]]
 name = "mirrord"
-version = "3.128.0"
+version = "3.129.0"
 dependencies = [
  "actix-codec",
  "clap",
@@ -4170,7 +4170,7 @@ dependencies = [
 
 [[package]]
 name = "mirrord-agent"
-version = "3.128.0"
+version = "3.129.0"
 dependencies = [
  "actix-codec",
  "async-trait",
@@ -4225,7 +4225,7 @@ dependencies = [
 
 [[package]]
 name = "mirrord-analytics"
-version = "3.128.0"
+version = "3.129.0"
 dependencies = [
  "assert-json-diff",
  "base64 0.22.1",
@@ -4239,7 +4239,7 @@ dependencies = [
 
 [[package]]
 name = "mirrord-auth"
-version = "3.128.0"
+version = "3.129.0"
 dependencies = [
  "bcder",
  "chrono",
@@ -4260,7 +4260,7 @@ dependencies = [
 
 [[package]]
 name = "mirrord-config"
-version = "3.128.0"
+version = "3.129.0"
 dependencies = [
  "bimap",
  "bitflags 2.6.0",
@@ -4283,7 +4283,7 @@ dependencies = [
 
 [[package]]
 name = "mirrord-config-derive"
-version = "3.128.0"
+version = "3.129.0"
 dependencies = [
  "proc-macro2",
  "proc-macro2-diagnostics",
@@ -4293,7 +4293,7 @@ dependencies = [
 
 [[package]]
 name = "mirrord-console"
-version = "3.128.0"
+version = "3.129.0"
 dependencies = [
  "bincode",
  "drain",
@@ -4309,7 +4309,7 @@ dependencies = [
 
 [[package]]
 name = "mirrord-intproxy"
-version = "3.128.0"
+version = "3.129.0"
 dependencies = [
  "bytes",
  "exponential-backoff",
@@ -4340,7 +4340,7 @@ dependencies = [
 
 [[package]]
 name = "mirrord-intproxy-protocol"
-version = "3.128.0"
+version = "3.129.0"
 dependencies = [
  "bincode",
  "mirrord-protocol",
@@ -4350,7 +4350,7 @@ dependencies = [
 
 [[package]]
 name = "mirrord-kube"
-version = "3.128.0"
+version = "3.129.0"
 dependencies = [
  "actix-codec",
  "async-stream",
@@ -4374,7 +4374,7 @@ dependencies = [
 
 [[package]]
 name = "mirrord-layer"
-version = "3.128.0"
+version = "3.129.0"
 dependencies = [
  "actix-codec",
  "base64 0.22.1",
@@ -4417,7 +4417,7 @@ dependencies = [
 
 [[package]]
 name = "mirrord-layer-macro"
-version = "3.128.0"
+version = "3.129.0"
 dependencies = [
  "proc-macro2",
  "quote",
@@ -4426,7 +4426,7 @@ dependencies = [
 
 [[package]]
 name = "mirrord-macros"
-version = "3.128.0"
+version = "3.129.0"
 dependencies = [
  "proc-macro2",
  "proc-macro2-diagnostics",
@@ -4436,7 +4436,7 @@ dependencies = [
 
 [[package]]
 name = "mirrord-operator"
-version = "3.128.0"
+version = "3.129.0"
 dependencies = [
  "base64 0.22.1",
  "bincode",
@@ -4469,7 +4469,7 @@ dependencies = [
 
 [[package]]
 name = "mirrord-progress"
-version = "3.128.0"
+version = "3.129.0"
 dependencies = [
  "enum_dispatch",
  "indicatif",
@@ -4504,7 +4504,7 @@ dependencies = [
 
 [[package]]
 name = "mirrord-sip"
-version = "3.128.0"
+version = "3.129.0"
 dependencies = [
  "apple-codesign",
  "object 0.36.7",
@@ -4517,7 +4517,7 @@ dependencies = [
 
 [[package]]
 name = "mirrord-vpn"
-version = "3.128.0"
+version = "3.129.0"
 dependencies = [
  "futures",
  "ipnet",
@@ -4865,7 +4865,7 @@ dependencies = [
 
 [[package]]
 name = "outgoing"
-version = "3.128.0"
+version = "3.129.0"
 
 [[package]]
 name = "outref"
@@ -5926,14 +5926,14 @@ dependencies = [
 
 [[package]]
 name = "rust-bypassed-unix-socket"
-version = "3.128.0"
+version = "3.129.0"
 dependencies = [
  "tokio",
 ]
 
 [[package]]
 name = "rust-e2e-fileops"
-version = "3.128.0"
+version = "3.129.0"
 dependencies = [
  "libc",
 ]
@@ -5949,7 +5949,7 @@ dependencies = [
 
 [[package]]
 name = "rust-unix-socket-client"
-version = "3.128.0"
+version = "3.129.0"
 dependencies = [
  "tokio",
 ]
diff --git a/Cargo.toml b/Cargo.toml
index da8a4e788d0..9a2b2a42cae 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -27,7 +27,7 @@ resolver = "2"
 
 # latest commits on rustls suppress certificate verification
 [workspace.package]
-version = "3.128.0"
+version = "3.129.0"
 edition = "2021"
 license = "MIT"
 readme = "README.md"
diff --git a/changelog.d/+103-policy-env-vars-exclude.added.md b/changelog.d/+103-policy-env-vars-exclude.added.md
deleted file mode 100644
index 2e1bde95ebd..00000000000
--- a/changelog.d/+103-policy-env-vars-exclude.added.md
+++ /dev/null
@@ -1 +0,0 @@
-Add policy to exclude env vars.
diff --git a/changelog.d/+104-policy-fs.added.md b/changelog.d/+104-policy-fs.added.md
deleted file mode 100644
index 312cf56f3fa..00000000000
--- a/changelog.d/+104-policy-fs.added.md
+++ /dev/null
@@ -1 +0,0 @@
-Add policy to control file ops from the operator.
diff --git a/changelog.d/+fs-policy-test.internal.md b/changelog.d/+fs-policy-test.internal.md
deleted file mode 100644
index 2ebd288613f..00000000000
--- a/changelog.d/+fs-policy-test.internal.md
+++ /dev/null
@@ -1 +0,0 @@
-Fixed fs policy E2E test.
diff --git a/changelog.d/+http-filter-docs.changed.md b/changelog.d/+http-filter-docs.changed.md
deleted file mode 100644
index 75a6917214a..00000000000
--- a/changelog.d/+http-filter-docs.changed.md
+++ /dev/null
@@ -1 +0,0 @@
-Extended docs for HTTP filter in the mirrord config.
\ No newline at end of file
diff --git a/changelog.d/+mirrord-policy-rejection.fixed.md b/changelog.d/+mirrord-policy-rejection.fixed.md
deleted file mode 100644
index ad7415c5411..00000000000
--- a/changelog.d/+mirrord-policy-rejection.fixed.md
+++ /dev/null
@@ -1 +0,0 @@
-Fixed a bug where port mirroring block (due to active mirrord policies) would terminate the mirrord session.
diff --git a/changelog.d/+pinned-cargo-chef.internal.md b/changelog.d/+pinned-cargo-chef.internal.md
deleted file mode 100644
index 8b18e6071d2..00000000000
--- a/changelog.d/+pinned-cargo-chef.internal.md
+++ /dev/null
@@ -1 +0,0 @@
-Pinned `cargo-chef` version to `0.1.68` in the dockerfiles.
\ No newline at end of file
diff --git a/changelog.d/2843.internal.md b/changelog.d/2843.internal.md
deleted file mode 100644
index c3587426952..00000000000
--- a/changelog.d/2843.internal.md
+++ /dev/null
@@ -1 +0,0 @@
-Added lint for unused crate dependencies.
\ No newline at end of file
diff --git a/changelog.d/2868.changed.md b/changelog.d/2868.changed.md
deleted file mode 100644
index f24bdc1461c..00000000000
--- a/changelog.d/2868.changed.md
+++ /dev/null
@@ -1 +0,0 @@
-Updated how intproxy is outputing logfile when using container mode, now logs will be written on host machine.
diff --git a/changelog.d/2956.added.md b/changelog.d/2956.added.md
deleted file mode 100644
index 5cadfd68a24..00000000000
--- a/changelog.d/2956.added.md
+++ /dev/null
@@ -1 +0,0 @@
-Support for stealing incoming connections that are over IPv6.
diff --git a/changelog.d/2986.changed.md b/changelog.d/2986.changed.md
deleted file mode 100644
index f17b5621854..00000000000
--- a/changelog.d/2986.changed.md
+++ /dev/null
@@ -1 +0,0 @@
-Changed log level for debugger ports detection.
\ No newline at end of file
diff --git a/changelog.d/2988.fixed.md b/changelog.d/2988.fixed.md
deleted file mode 100644
index 95b7074d056..00000000000
--- a/changelog.d/2988.fixed.md
+++ /dev/null
@@ -1 +0,0 @@
-Fixed panic when Go >=1.23.3 verifies pidfd support on Linux.
\ No newline at end of file
diff --git a/changelog.d/2992.fixed.md b/changelog.d/2992.fixed.md
deleted file mode 100644
index 0e907384f90..00000000000
--- a/changelog.d/2992.fixed.md
+++ /dev/null
@@ -1 +0,0 @@
-Fix misleading agent IO operation error that always mentioned getaddrinfo.
diff --git a/changelog.d/2999.added.md b/changelog.d/2999.added.md
deleted file mode 100644
index ac9b5676f4d..00000000000
--- a/changelog.d/2999.added.md
+++ /dev/null
@@ -1 +0,0 @@
-Added available namespaces to `mirrord ls` output. New output format is enabled with `--rich` flag.
diff --git a/changelog.d/3004.changed.md b/changelog.d/3004.changed.md
deleted file mode 100644
index 4a6367bf967..00000000000
--- a/changelog.d/3004.changed.md
+++ /dev/null
@@ -1 +0,0 @@
-use file buffering by default to improve performance