diff --git a/.release-please-manifest.json b/.release-please-manifest.json
index f960d89..bc14d13 100644
--- a/.release-please-manifest.json
+++ b/.release-please-manifest.json
@@ -5,5 +5,5 @@
   "services/dns-mirror": "0.3.1",
   "services/github-token-broker": "0.2.1",
   "schemas/lab": "0.2.1",
-  "tools/labctl": "0.2.0"
+  "tools/labctl": "0.3.0"
 }
diff --git a/tools/labctl/CHANGELOG.md b/tools/labctl/CHANGELOG.md
index eecfaa5..c89c29a 100644
--- a/tools/labctl/CHANGELOG.md
+++ b/tools/labctl/CHANGELOG.md
@@ -1,5 +1,16 @@
 # Changelog
 
+## [0.3.0](https://github.com/GilmanLab/platform/compare/labctl-v0.2.0...labctl-v0.3.0) (2026-05-03)
+
+
+### Features
+
+* **labctl:** build Talos bootstrap images ([#64](https://github.com/GilmanLab/platform/issues/64)) ([076655b](https://github.com/GilmanLab/platform/commit/076655bb92b79e9c337e807991249647e3c15024))
+* **labctl:** harden Talos image build reliability ([#65](https://github.com/GilmanLab/platform/issues/65)) ([8b983ce](https://github.com/GilmanLab/platform/commit/8b983cebfc9fe78593064059ac0a8d0bfe07ef36))
+* **labctl:** protect Talos cidata as secret material and size dynamically ([#66](https://github.com/GilmanLab/platform/issues/66)) ([1c3160a](https://github.com/GilmanLab/platform/commit/1c3160a7a5df57664deac3a4c6e5d03dc48b8d17))
+* **schemas:** add Talos image build schema ([#60](https://github.com/GilmanLab/platform/issues/60)) ([4340279](https://github.com/GilmanLab/platform/commit/434027956e7d5fb7dd72287047926ab99d8a356a))
+* **schemas:** default Talos image build output and tighten dir constraint ([#67](https://github.com/GilmanLab/platform/issues/67)) ([d2d036d](https://github.com/GilmanLab/platform/commit/d2d036db9fdd20b9347d29d61dc4a9b774dc0618))
+
 ## [0.2.0](https://github.com/GilmanLab/platform/compare/labctl-v0.1.0...labctl-v0.2.0) (2026-04-30)
 
 
diff --git a/tools/labctl/VERSION b/tools/labctl/VERSION
index 0ea3a94..0d91a54 100644
--- a/tools/labctl/VERSION
+++ b/tools/labctl/VERSION
@@ -1 +1 @@
-0.2.0
+0.3.0