diff --git a/CHANGELOG.md b/CHANGELOG.md
index f43a3a82bd8..281365fd2b4 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -8,6 +8,31 @@ This project uses [*towncrier*](https://towncrier.readthedocs.io/) and the chang
 
 <!-- towncrier release notes start -->
 
+## [3.97.0](https://github.com/metalbear-co/mirrord/tree/3.97.0) - 2024-04-16
+
+
+### Added
+
+- Agent now authenticates TLS connections, using a provided X509 certificate
+  (mirrord for Teams only).
+  [#2362](https://github.com/metalbear-co/mirrord/issues/2362)
+
+
+### Changed
+
+- Changed port stealing configuration:
+  1. Added new `ports` field to the `incoming` configuration. The field lists
+  ports that should be stolen/mirrored. Other ports remain local.
+  2. Changed the way `incoming.http_filter.ports` field is interpreted. Ports
+  not listed in this field are not stolen, unless listed in `incoming.ports`.
+  [#2366](https://github.com/metalbear-co/mirrord/issues/2366)
+
+
+### Fixed
+
+- Change reqwest to use rustls with native certificates to work in more cases
+
+
 ## [3.96.1](https://github.com/metalbear-co/mirrord/tree/3.96.1) - 2024-04-14
 
 
diff --git a/Cargo.lock b/Cargo.lock
index 244fdce6335..17f6461d130 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -1945,7 +1945,7 @@ dependencies = [
 
 [[package]]
 name = "fileops"
-version = "3.96.1"
+version = "3.97.0"
 dependencies = [
  "libc",
 ]
@@ -2792,7 +2792,7 @@ dependencies = [
 
 [[package]]
 name = "issue1317"
-version = "3.96.1"
+version = "3.97.0"
 dependencies = [
  "actix-web",
  "env_logger",
@@ -2804,7 +2804,7 @@ dependencies = [
 
 [[package]]
 name = "issue1776"
-version = "3.96.1"
+version = "3.97.0"
 dependencies = [
  "errno 0.3.8",
  "libc",
@@ -2813,7 +2813,7 @@ dependencies = [
 
 [[package]]
 name = "issue1776portnot53"
-version = "3.96.1"
+version = "3.97.0"
 dependencies = [
  "libc",
  "socket2 0.5.5",
@@ -2821,14 +2821,14 @@ dependencies = [
 
 [[package]]
 name = "issue1899"
-version = "3.96.1"
+version = "3.97.0"
 dependencies = [
  "libc",
 ]
 
 [[package]]
 name = "issue2001"
-version = "3.96.1"
+version = "3.97.0"
 dependencies = [
  "libc",
 ]
@@ -3127,7 +3127,7 @@ checksum = "c4cd1a83af159aa67994778be9070f0ae1bd732942279cabb14f86f986a21456"
 
 [[package]]
 name = "listen_ports"
-version = "3.96.1"
+version = "3.97.0"
 
 [[package]]
 name = "local-channel"
@@ -3344,7 +3344,7 @@ dependencies = [
 
 [[package]]
 name = "mirrord"
-version = "3.96.1"
+version = "3.97.0"
 dependencies = [
  "actix-codec",
  "anyhow",
@@ -3389,7 +3389,7 @@ dependencies = [
 
 [[package]]
 name = "mirrord-agent"
-version = "3.96.1"
+version = "3.97.0"
 dependencies = [
  "actix-codec",
  "async-trait",
@@ -3444,7 +3444,7 @@ dependencies = [
 
 [[package]]
 name = "mirrord-analytics"
-version = "3.96.1"
+version = "3.97.0"
 dependencies = [
  "assert-json-diff",
  "base64 0.21.7",
@@ -3458,7 +3458,7 @@ dependencies = [
 
 [[package]]
 name = "mirrord-auth"
-version = "3.96.1"
+version = "3.97.0"
 dependencies = [
  "chrono",
  "fs4",
@@ -3478,7 +3478,7 @@ dependencies = [
 
 [[package]]
 name = "mirrord-config"
-version = "3.96.1"
+version = "3.97.0"
 dependencies = [
  "bimap",
  "bitflags 2.4.1",
@@ -3500,7 +3500,7 @@ dependencies = [
 
 [[package]]
 name = "mirrord-config-derive"
-version = "3.96.1"
+version = "3.97.0"
 dependencies = [
  "proc-macro2",
  "proc-macro2-diagnostics",
@@ -3510,7 +3510,7 @@ dependencies = [
 
 [[package]]
 name = "mirrord-console"
-version = "3.96.1"
+version = "3.97.0"
 dependencies = [
  "bincode",
  "drain",
@@ -3526,7 +3526,7 @@ dependencies = [
 
 [[package]]
 name = "mirrord-intproxy"
-version = "3.96.1"
+version = "3.97.0"
 dependencies = [
  "bytes",
  "http-body-util",
@@ -3548,7 +3548,7 @@ dependencies = [
 
 [[package]]
 name = "mirrord-intproxy-protocol"
-version = "3.96.1"
+version = "3.97.0"
 dependencies = [
  "bincode",
  "mirrord-protocol",
@@ -3558,7 +3558,7 @@ dependencies = [
 
 [[package]]
 name = "mirrord-kube"
-version = "3.96.1"
+version = "3.97.0"
 dependencies = [
  "actix-codec",
  "base64 0.21.7",
@@ -3585,7 +3585,7 @@ dependencies = [
 
 [[package]]
 name = "mirrord-layer"
-version = "3.96.1"
+version = "3.97.0"
 dependencies = [
  "actix-codec",
  "anyhow",
@@ -3641,7 +3641,7 @@ dependencies = [
 
 [[package]]
 name = "mirrord-layer-macro"
-version = "3.96.1"
+version = "3.97.0"
 dependencies = [
  "proc-macro2",
  "quote",
@@ -3650,7 +3650,7 @@ dependencies = [
 
 [[package]]
 name = "mirrord-macros"
-version = "3.96.1"
+version = "3.97.0"
 dependencies = [
  "proc-macro2",
  "proc-macro2-diagnostics",
@@ -3660,7 +3660,7 @@ dependencies = [
 
 [[package]]
 name = "mirrord-operator"
-version = "3.96.1"
+version = "3.97.0"
 dependencies = [
  "actix-codec",
  "async-trait",
@@ -3694,7 +3694,7 @@ dependencies = [
 
 [[package]]
 name = "mirrord-progress"
-version = "3.96.1"
+version = "3.97.0"
 dependencies = [
  "enum_dispatch",
  "indicatif",
@@ -3726,7 +3726,7 @@ dependencies = [
 
 [[package]]
 name = "mirrord-sip"
-version = "3.96.1"
+version = "3.97.0"
 dependencies = [
  "apple-codesign",
  "memchr",
@@ -4054,7 +4054,7 @@ dependencies = [
 
 [[package]]
 name = "outgoing"
-version = "3.96.1"
+version = "3.97.0"
 
 [[package]]
 name = "overload"
@@ -5044,21 +5044,21 @@ dependencies = [
 
 [[package]]
 name = "rust-bypassed-unix-socket"
-version = "3.96.1"
+version = "3.97.0"
 dependencies = [
  "tokio",
 ]
 
 [[package]]
 name = "rust-e2e-fileops"
-version = "3.96.1"
+version = "3.97.0"
 dependencies = [
  "libc",
 ]
 
 [[package]]
 name = "rust-unix-socket-client"
-version = "3.96.1"
+version = "3.97.0"
 dependencies = [
  "tokio",
 ]
diff --git a/Cargo.toml b/Cargo.toml
index fd0c1054d54..d406bc2baeb 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -24,7 +24,7 @@ resolver = "2"
 
 # latest commits on rustls suppress certificate verification
 [workspace.package]
-version = "3.96.1"
+version = "3.97.0"
 edition = "2021"
 license = "MIT"
 readme = "README.md"
diff --git a/changelog.d/+reqwest-trust-ca.fixed.md b/changelog.d/+reqwest-trust-ca.fixed.md
deleted file mode 100644
index 45e5d998810..00000000000
--- a/changelog.d/+reqwest-trust-ca.fixed.md
+++ /dev/null
@@ -1 +0,0 @@
-Change reqwest to use rustls with native certificates to work in more cases
\ No newline at end of file
diff --git a/changelog.d/2362.added.md b/changelog.d/2362.added.md
deleted file mode 100644
index a7b9fb075ef..00000000000
--- a/changelog.d/2362.added.md
+++ /dev/null
@@ -1 +0,0 @@
-Agent now authenticates TLS connections, using a provided X509 certificate (mirrord for Teams only).
\ No newline at end of file
diff --git a/changelog.d/2366.changed.md b/changelog.d/2366.changed.md
deleted file mode 100644
index 08554893ec2..00000000000
--- a/changelog.d/2366.changed.md
+++ /dev/null
@@ -1,3 +0,0 @@
-Changed port stealing configuration:
-1. Added new `ports` field to the `incoming` configuration. The field lists ports that should be stolen/mirrored. Other ports remain local.
-2. Changed the way `incoming.http_filter.ports` field is interpreted. Ports not listed in this field are not stolen, unless listed in `incoming.ports`.
\ No newline at end of file