diff --git a/doc/CHANGELOG.md b/doc/CHANGELOG.md
index 1d45683..5f64f8a 100644
--- a/doc/CHANGELOG.md
+++ b/doc/CHANGELOG.md
@@ -1,3 +1,14 @@
+## v3.01.99-rc3 - 2021/01/21
+- feat: `rootListIngressKeys`: look for all well-known authkeys files
+- feat: add `--(in|ex)clude` filters to `groupList` and `accountList`
+- enh: groupList: use cache to speedup calls
+- enh: config: detect `warnBefore`/`idleTimeout` misconfiguration (#125)
+- fix: scripts: `(( ))` returns 1 if evaluated to zero, hence failing under `set -e`
+- fix: config: be more permissive for `documentationURL` regex
+- fix: TOCTTOU fixes in ttyrec rotation script and lingering sessions reaper
+- fix: confusing error messages in `groupDelServer`
+- chore: tests: also update totalerrors while tests are running
+
 ## v3.01.99-rc2 - 2021/01/12
 - fix: re-introduce the ttyrecfile field (fixes #114)
 - fix: logs: sql dbname was not properly passed through the update logs func (fixes #114)
diff --git a/lib/perl/OVH/Bastion.pm b/lib/perl/OVH/Bastion.pm
index 0a9c059..a088991 100644
--- a/lib/perl/OVH/Bastion.pm
+++ b/lib/perl/OVH/Bastion.pm
@@ -5,7 +5,7 @@ use common::sense;
 use Fcntl;
 use POSIX qw(strftime);
 
-our $VERSION = '3.01.99-rc2';
+our $VERSION = '3.01.99-rc3';
 
 BEGIN {
     # only used by the handler below