diff --git a/src/content/changes/ai-agents/klaus/v0.0.152.md b/src/content/changes/ai-agents/klaus/v0.0.152.md
new file mode 100644
index 0000000000..1fe509c3ca
--- /dev/null
+++ b/src/content/changes/ai-agents/klaus/v0.0.152.md
@@ -0,0 +1,23 @@
+---
+# Generated by scripts/aggregate-changelogs. WARNING: Manual edits to this files will be overwritten.
+changes_categories:
+- AI Agents
+changes_entry:
+  repository: giantswarm/klaus
+  url: https://github.com/giantswarm/klaus/releases/tag/v0.0.152
+  version: 0.0.152
+  version_tag: v0.0.152
+date: '2026-05-14T11:16:43'
+description: Changelog entry for giantswarm/klaus version 0.0.152, published on 14
+  May 2026, 11:16.
+title: klaus release v0.0.152
+---
+
+## What's Changed
+* fix(deps): update module github.com/giantswarm/mcp-oauth to v0.2.119 by @renovate[bot] in https://github.com/giantswarm/klaus/pull/251
+* fix(deps): update module github.com/mark3labs/mcp-go to v0.54.0 by @renovate[bot] in https://github.com/giantswarm/klaus/pull/257
+
+
+**Full Changelog**: https://github.com/giantswarm/klaus/compare/v0.0.151...v0.0.152
+
+
diff --git a/src/content/changes/ai-agents/klausctl/v0.0.81.md b/src/content/changes/ai-agents/klausctl/v0.0.81.md
new file mode 100644
index 0000000000..de0a0fee13
--- /dev/null
+++ b/src/content/changes/ai-agents/klausctl/v0.0.81.md
@@ -0,0 +1,22 @@
+---
+# Generated by scripts/aggregate-changelogs. WARNING: Manual edits to this files will be overwritten.
+changes_categories:
+- AI Agents
+changes_entry:
+  repository: giantswarm/klausctl
+  url: https://github.com/giantswarm/klausctl/releases/tag/v0.0.81
+  version: 0.0.81
+  version_tag: v0.0.81
+date: '2026-05-13T13:53:04'
+description: Changelog entry for giantswarm/klausctl version 0.0.81, published on
+  13 May 2026, 13:53.
+title: klausctl release v0.0.81
+---
+
+## What's Changed
+* fix(deps): update module github.com/mark3labs/mcp-go to v0.54.0 by @renovate[bot] in https://github.com/giantswarm/klausctl/pull/223
+
+
+**Full Changelog**: https://github.com/giantswarm/klausctl/compare/v0.0.80...v0.0.81
+
+
diff --git a/src/content/changes/ai-agents/muster/v0.1.173.md b/src/content/changes/ai-agents/muster/v0.1.173.md
new file mode 100644
index 0000000000..4fa9461b39
--- /dev/null
+++ b/src/content/changes/ai-agents/muster/v0.1.173.md
@@ -0,0 +1,22 @@
+---
+# Generated by scripts/aggregate-changelogs. WARNING: Manual edits to this files will be overwritten.
+changes_categories:
+- AI Agents
+changes_entry:
+  repository: giantswarm/muster
+  url: https://github.com/giantswarm/muster/releases/tag/v0.1.173
+  version: 0.1.173
+  version_tag: v0.1.173
+date: '2026-05-13T08:26:44'
+description: Changelog entry for giantswarm/muster version 0.1.173, published on 13
+  May 2026, 08:26.
+title: muster release v0.1.173
+---
+
+## What's Changed
+* fix(deps): update module github.com/giantswarm/mcp-oauth to v0.2.126 by @renovate[bot] in https://github.com/giantswarm/muster/pull/660
+
+
+**Full Changelog**: https://github.com/giantswarm/muster/compare/v0.1.172...v0.1.173
+
+
diff --git a/src/content/changes/ai-agents/muster/v0.1.174.md b/src/content/changes/ai-agents/muster/v0.1.174.md
new file mode 100644
index 0000000000..7f9c44bd03
--- /dev/null
+++ b/src/content/changes/ai-agents/muster/v0.1.174.md
@@ -0,0 +1,22 @@
+---
+# Generated by scripts/aggregate-changelogs. WARNING: Manual edits to this files will be overwritten.
+changes_categories:
+- AI Agents
+changes_entry:
+  repository: giantswarm/muster
+  url: https://github.com/giantswarm/muster/releases/tag/v0.1.174
+  version: 0.1.174
+  version_tag: v0.1.174
+date: '2026-05-13T13:59:39'
+description: Changelog entry for giantswarm/muster version 0.1.174, published on 13
+  May 2026, 13:59.
+title: muster release v0.1.174
+---
+
+## What's Changed
+* fix(deps): update module github.com/mark3labs/mcp-go to v0.54.0 by @renovate[bot] in https://github.com/giantswarm/muster/pull/675
+
+
+**Full Changelog**: https://github.com/giantswarm/muster/compare/v0.1.173...v0.1.174
+
+
diff --git a/src/content/changes/capa-releases/releases/aws-31.2.0.md b/src/content/changes/capa-releases/releases/aws-31.2.0.md
new file mode 100644
index 0000000000..29fc4f4a49
--- /dev/null
+++ b/src/content/changes/capa-releases/releases/aws-31.2.0.md
@@ -0,0 +1,44 @@
+---
+# Generated by scripts/aggregate-changelogs. WARNING: Manual edits to this files will be overwritten.
+aliases:
+- /changes/workload-cluster-releases-capa/releases/aws-31.2.0/
+changes_categories:
+- CAPA releases
+changes_entry:
+  repository: giantswarm/releases
+  url: https://github.com/giantswarm/releases/tree/master/capa/v31.2.0
+  version: aws-31.2.0
+  version_tag: aws-31.2.0
+date: '2026-05-13T07:37:33'
+description: Release notes for CAPA workload cluster release aws-31.2.0, published
+  on 13 May 2026, 07:37.
+title: Workload cluster release aws-31.2.0 for CAPA
+---
+
+Mitigates the "Dirty Frag" Linux kernel vulnerabilities (esp4/esp6, rxrpc) that could allow local privilege escalation and container escape on affected nodes.
+
+## Changes compared to v31.1.2
+
+### Components
+
+- cluster-aws from v3.6.2 to v3.8.0
+- cluster from v2.5.1 to v2.6.1
+- Flatcar from v4152.2.3 to [v4593.2.1](https://www.flatcar.org/releases/#release-4593.2.1)
+- os-tooling from v1.26.1 to v1.31.0
+
+### cluster-aws [v3.6.2...v3.8.0](https://github.com/giantswarm/cluster-aws/compare/v3.6.2...v3.8.0)
+
+#### Changed
+
+- Support newer Flatcar versions which require a larger root volume size. For ease of migration, enforce at least 15 GB even if a smaller, explicit size is specified in chart values.
+
+### cluster [v2.5.1...v2.6.1](https://github.com/giantswarm/cluster/compare/v2.5.1...v2.6.1)
+
+#### Added
+
+- Add `enabled` flag to `providerIntegration.workers.kubeadmConfig` to disable the rendering of the `KubeadmConfig` resource.
+- containerd: Add flag to enable SELinux.
+
+#### Changed
+
+- Values: Fix schema. ([#580](https://github.com/giantswarm/cluster/pull/580))
diff --git a/src/content/changes/capa-releases/releases/aws-32.3.0.md b/src/content/changes/capa-releases/releases/aws-32.3.0.md
new file mode 100644
index 0000000000..72782f72c4
--- /dev/null
+++ b/src/content/changes/capa-releases/releases/aws-32.3.0.md
@@ -0,0 +1,32 @@
+---
+# Generated by scripts/aggregate-changelogs. WARNING: Manual edits to this files will be overwritten.
+aliases:
+- /changes/workload-cluster-releases-capa/releases/aws-32.3.0/
+changes_categories:
+- CAPA releases
+changes_entry:
+  repository: giantswarm/releases
+  url: https://github.com/giantswarm/releases/tree/master/capa/v32.3.0
+  version: aws-32.3.0
+  version_tag: aws-32.3.0
+date: '2026-05-13T07:35:59'
+description: Release notes for CAPA workload cluster release aws-32.3.0, published
+  on 13 May 2026, 07:35.
+title: Workload cluster release aws-32.3.0 for CAPA
+---
+
+Mitigates the "Dirty Frag" Linux kernel vulnerabilities (esp4/esp6, rxrpc) that could allow local privilege escalation and container escape on affected nodes.
+
+## Changes compared to v32.2.0
+
+### Components
+
+- cluster-aws from v5.4.0 to v5.5.0
+- Flatcar from v4230.2.4 to [v4593.2.1](https://www.flatcar.org/releases/#release-4593.2.1)
+- os-tooling from v1.26.2 to v1.31.0
+
+### cluster-aws [v5.4.0...v5.5.0](https://github.com/giantswarm/cluster-aws/compare/v5.4.0...v5.5.0)
+
+#### Changed
+
+- Support newer Flatcar versions which require a larger root volume size. For ease of migration, enforce at least 15 GB even if a smaller, explicit size is specified in chart values.
diff --git a/src/content/changes/capa-releases/releases/aws-33.3.0.md b/src/content/changes/capa-releases/releases/aws-33.3.0.md
new file mode 100644
index 0000000000..aceb8d0a7c
--- /dev/null
+++ b/src/content/changes/capa-releases/releases/aws-33.3.0.md
@@ -0,0 +1,32 @@
+---
+# Generated by scripts/aggregate-changelogs. WARNING: Manual edits to this files will be overwritten.
+aliases:
+- /changes/workload-cluster-releases-capa/releases/aws-33.3.0/
+changes_categories:
+- CAPA releases
+changes_entry:
+  repository: giantswarm/releases
+  url: https://github.com/giantswarm/releases/tree/master/capa/v33.3.0
+  version: aws-33.3.0
+  version_tag: aws-33.3.0
+date: '2026-05-13T07:34:25'
+description: Release notes for CAPA workload cluster release aws-33.3.0, published
+  on 13 May 2026, 07:34.
+title: Workload cluster release aws-33.3.0 for CAPA
+---
+
+Mitigates the "Dirty Frag" Linux kernel vulnerabilities (esp4/esp6, rxrpc) that could allow local privilege escalation and container escape on affected nodes.
+
+## Changes compared to v33.2.0
+
+### Components
+
+- cluster-aws from v6.4.4 to v6.5.0
+- Flatcar from v4459.2.1 to [v4593.2.1](https://www.flatcar.org/releases/#release-4593.2.1)
+- os-tooling from v1.26.2 to v1.31.0
+
+### cluster-aws [v6.4.4...v6.5.0](https://github.com/giantswarm/cluster-aws/compare/v6.4.4...v6.5.0)
+
+#### Changed
+
+- Support newer Flatcar versions which require a larger root volume size. For ease of migration, enforce at least 15 GB even if a smaller, explicit size is specified in chart values.
diff --git a/src/content/changes/capa-releases/releases/aws-34.3.0.md b/src/content/changes/capa-releases/releases/aws-34.3.0.md
new file mode 100644
index 0000000000..5e08d82f40
--- /dev/null
+++ b/src/content/changes/capa-releases/releases/aws-34.3.0.md
@@ -0,0 +1,32 @@
+---
+# Generated by scripts/aggregate-changelogs. WARNING: Manual edits to this files will be overwritten.
+aliases:
+- /changes/workload-cluster-releases-capa/releases/aws-34.3.0/
+changes_categories:
+- CAPA releases
+changes_entry:
+  repository: giantswarm/releases
+  url: https://github.com/giantswarm/releases/tree/master/capa/v34.3.0
+  version: aws-34.3.0
+  version_tag: aws-34.3.0
+date: '2026-05-13T07:31:09'
+description: Release notes for CAPA workload cluster release aws-34.3.0, published
+  on 13 May 2026, 07:31.
+title: Workload cluster release aws-34.3.0 for CAPA
+---
+
+Mitigates the "Dirty Frag" Linux kernel vulnerabilities (esp4/esp6, rxrpc) that could allow local privilege escalation and container escape on affected nodes.
+
+## Changes compared to v34.2.0
+
+### Components
+
+- cluster-aws from v7.6.1 to v7.7.1
+- Flatcar from v4459.2.4 to [v4593.2.1](https://www.flatcar.org/releases/#release-4593.2.1)
+- os-tooling from v1.28.0 to v1.31.0
+
+### cluster-aws [v7.6.1...v7.7.1](https://github.com/giantswarm/cluster-aws/compare/v7.6.1...v7.7.1)
+
+#### Changed
+
+- Support newer Flatcar versions which require a larger root volume size. For ease of migration, enforce at least 15 GB even if a smaller, explicit size is specified in chart values.
diff --git a/src/content/changes/capv-releases/releases/vsphere-34.3.0.md b/src/content/changes/capv-releases/releases/vsphere-34.3.0.md
new file mode 100644
index 0000000000..df4d37cf72
--- /dev/null
+++ b/src/content/changes/capv-releases/releases/vsphere-34.3.0.md
@@ -0,0 +1,25 @@
+---
+# Generated by scripts/aggregate-changelogs. WARNING: Manual edits to this files will be overwritten.
+aliases:
+- /changes/workload-cluster-releases-vsphere/releases/vsphere-34.3.0/
+changes_categories:
+- CAPV releases
+changes_entry:
+  repository: giantswarm/releases
+  url: https://github.com/giantswarm/releases/tree/master/vsphere/v34.3.0
+  version: vsphere-34.3.0
+  version_tag: vsphere-34.3.0
+date: '2026-05-13T07:30:45'
+description: Release notes for CAPV workload cluster release vsphere-34.3.0, published
+  on 13 May 2026, 07:30.
+title: Workload cluster release vsphere-34.3.0 for CAPV
+---
+
+Mitigates the "Dirty Frag" Linux kernel vulnerabilities (esp4/esp6, rxrpc) that could allow local privilege escalation and container escape on affected nodes.
+
+## Changes compared to v34.2.0
+
+### Components
+
+- Flatcar from v4459.2.4 to [v4593.2.1](https://www.flatcar.org/releases/#release-4593.2.1)
+- os-tooling from v1.28.0 to v1.31.0
diff --git a/src/content/changes/capvcd-releases/releases/cloud-director-34.3.0.md b/src/content/changes/capvcd-releases/releases/cloud-director-34.3.0.md
new file mode 100644
index 0000000000..3aac20fc1b
--- /dev/null
+++ b/src/content/changes/capvcd-releases/releases/cloud-director-34.3.0.md
@@ -0,0 +1,25 @@
+---
+# Generated by scripts/aggregate-changelogs. WARNING: Manual edits to this files will be overwritten.
+aliases:
+- /changes/workload-cluster-releases-cloud-director/releases/cloud-director-34.3.0/
+changes_categories:
+- CAPVCD releases
+changes_entry:
+  repository: giantswarm/releases
+  url: https://github.com/giantswarm/releases/tree/master/cloud-director/v34.3.0
+  version: cloud-director-34.3.0
+  version_tag: cloud-director-34.3.0
+date: '2026-05-13T07:30:34'
+description: Release notes for CAPVCD workload cluster release cloud-director-34.3.0,
+  published on 13 May 2026, 07:30.
+title: Workload cluster release cloud-director-34.3.0 for CAPVCD
+---
+
+Mitigates the "Dirty Frag" Linux kernel vulnerabilities (esp4/esp6, rxrpc) that could allow local privilege escalation and container escape on affected nodes.
+
+## Changes compared to v34.2.0
+
+### Components
+
+- Flatcar from v4459.2.4 to [v4593.2.1](https://www.flatcar.org/releases/#release-4593.2.1)
+- os-tooling from v1.28.0 to v1.31.0
diff --git a/src/content/changes/capz-releases/releases/azure-34.3.0.md b/src/content/changes/capz-releases/releases/azure-34.3.0.md
new file mode 100644
index 0000000000..cccdba1a18
--- /dev/null
+++ b/src/content/changes/capz-releases/releases/azure-34.3.0.md
@@ -0,0 +1,25 @@
+---
+# Generated by scripts/aggregate-changelogs. WARNING: Manual edits to this files will be overwritten.
+aliases:
+- /changes/workload-cluster-releases-azure/releases/azure-34.3.0/
+changes_categories:
+- CAPZ releases
+changes_entry:
+  repository: giantswarm/releases
+  url: https://github.com/giantswarm/releases/tree/master/azure/v34.3.0
+  version: azure-34.3.0
+  version_tag: azure-34.3.0
+date: '2026-05-13T07:30:19'
+description: Release notes for CAPZ workload cluster release azure-34.3.0, published
+  on 13 May 2026, 07:30.
+title: Workload cluster release azure-34.3.0 for CAPZ
+---
+
+Mitigates the "Dirty Frag" Linux kernel vulnerabilities (esp4/esp6, rxrpc) that could allow local privilege escalation and container escape on affected nodes.
+
+## Changes compared to v34.2.0
+
+### Components
+
+- Flatcar from v4459.2.4 to [v4593.2.1](https://www.flatcar.org/releases/#release-4593.2.1)
+- os-tooling from v1.28.0 to v1.31.0
diff --git a/src/content/changes/developer-portal/backstage/v0.131.0.md b/src/content/changes/developer-portal/backstage/v0.131.0.md
new file mode 100644
index 0000000000..9c3885c00a
--- /dev/null
+++ b/src/content/changes/developer-portal/backstage/v0.131.0.md
@@ -0,0 +1,21 @@
+---
+# Generated by scripts/aggregate-changelogs. WARNING: Manual edits to this files will be overwritten.
+changes_categories:
+- Developer Portal
+changes_entry:
+  repository: giantswarm/backstage
+  url: https://github.com/giantswarm/backstage/blob/main/CHANGELOG.md#01310---2026-05-13
+  version: 0.131.0
+  version_tag: v0.131.0
+date: '2026-05-13T14:15:56'
+description: Changelog entry for giantswarm/backstage version 0.131.0, published on
+  13 May 2026, 14:15.
+title: backstage release v0.131.0
+---
+
+### Added
+- Add `LatestReleaseProcessor` that annotates Component entities with `giantswarm.io/latest-release-tag` and `giantswarm.io/latest-release-date` from GitHub Releases, with optional tag-prefix matching for monorepos.
+- Add `KlausProvider`, a catalog entity provider that discovers Klaus personalities, toolchains, and plugins from GitHub and emits them as Component entities.
+### Fixed
+- Fix Helm charts column in the catalog showing "Yes (0)" for entities without charts.
+See [./docs/releases/v0.131.0-changelog.md](https://github.com/giantswarm/backstage/blob/main/docs/releases/v0.131.0-changelog.md) for more information.
diff --git a/src/content/changes/developer-portal/backstage/v0.131.1.md b/src/content/changes/developer-portal/backstage/v0.131.1.md
new file mode 100644
index 0000000000..badffdb3d9
--- /dev/null
+++ b/src/content/changes/developer-portal/backstage/v0.131.1.md
@@ -0,0 +1,19 @@
+---
+# Generated by scripts/aggregate-changelogs. WARNING: Manual edits to this files will be overwritten.
+changes_categories:
+- Developer Portal
+changes_entry:
+  repository: giantswarm/backstage
+  url: https://github.com/giantswarm/backstage/blob/main/CHANGELOG.md#01311---2026-05-14
+  version: 0.131.1
+  version_tag: v0.131.1
+date: '2026-05-14T14:04:59'
+description: Changelog entry for giantswarm/backstage version 0.131.1, published on
+  14 May 2026, 14:04.
+title: backstage release v0.131.1
+---
+
+### Fixed
+- Catalog: fall back to PAT or unauthenticated requests when the configured GitHub App has no access to a repo, so `LatestReleaseProcessor` and `SbomDependencyProcessor` work for repos outside the App's installation (and public repos work without any integration configured).
+- AI chat: pin the `ai` package to a single version via root yarn resolution to fix `AI_TypeValidationError` when invoking MCP tools.
+See [./docs/releases/v0.131.1-changelog.md](https://github.com/giantswarm/backstage/blob/main/docs/releases/v0.131.1-changelog.md) for more information.
diff --git a/src/content/changes/security/external-secrets/v0.20.4.md b/src/content/changes/security/external-secrets/v0.20.4.md
index d467c1c36b..a5e41f6f9f 100644
--- a/src/content/changes/security/external-secrets/v0.20.4.md
+++ b/src/content/changes/security/external-secrets/v0.20.4.md
@@ -16,7 +16,7 @@ title: external-secrets release v0.20.4
 ### Changed
 - Upgrading to the `v0.20.4` version. Included changes:
   - https://github.com/external-secrets/external-secrets/releases/tag/v0.19.0
-    - Includes a breaking change because the CRDs are now too big. Apply them with `--server-side` flag of `kubectl apply`. 
+    - Includes a breaking change because the CRDs are now too big. Apply them with `--server-side` flag of `kubectl apply`.
   - https://github.com/external-secrets/external-secrets/releases/tag/v0.19.1
   - https://github.com/external-secrets/external-secrets/releases/tag/v0.19.2
   - https://github.com/external-secrets/external-secrets/releases/tag/v0.20.0
diff --git a/src/content/changes/security/external-secrets/v2.4.1.md b/src/content/changes/security/external-secrets/v2.4.1.md
new file mode 100644
index 0000000000..6e0b09596d
--- /dev/null
+++ b/src/content/changes/security/external-secrets/v2.4.1.md
@@ -0,0 +1,20 @@
+---
+# Generated by scripts/aggregate-changelogs. WARNING: Manual edits to this files will be overwritten.
+changes_categories:
+- Security
+changes_entry:
+  repository: giantswarm/external-secrets
+  url: https://github.com/giantswarm/external-secrets/blob/main/CHANGELOG.md#241---2026-05-14
+  version: 2.4.1
+  version_tag: v2.4.1
+date: '2026-05-14T15:11:37'
+description: Changelog entry for giantswarm/external-secrets version 2.4.1, published
+  on 14 May 2026, 15:11.
+title: external-secrets release v2.4.1
+---
+
+### Changed
+- Updating to the `v2.4.1` version.
+### BREAKING CHANGES
+- The Alibaba and Device42 providers are gone.
+- The `htpasswd` function requires three arguments from now on, see https://github.com/Masterminds/sprig/blob/master/docs/crypto.md?plain=1#L50-L56.