diff --git a/CHANGELOG.md b/CHANGELOG.md
index 6983b27cc6e..93fedbb94de 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -4,6 +4,12 @@ Docs: https://docs.openclaw.ai
## Unreleased
+### Changes
+
+### Fixes
+
+## 2026.3.11
+
### Security
- Gateway/WebSocket: enforce browser origin validation for all browser-originated connections regardless of whether proxy headers are present, closing a cross-site WebSocket hijacking path in `trusted-proxy` mode that could grant untrusted origins `operator.admin` access. (GHSA-5wcw-8jjv-m286)
diff --git a/apps/android/app/build.gradle.kts b/apps/android/app/build.gradle.kts
index 10b70cea283..32306780c72 100644
--- a/apps/android/app/build.gradle.kts
+++ b/apps/android/app/build.gradle.kts
@@ -64,7 +64,7 @@ android {
minSdk = 31
targetSdk = 36
versionCode = 202603110
- versionName = "2026.3.11-beta.1"
+ versionName = "2026.3.11"
ndk {
// Support all major ABIs — native libs are tiny (~47 KB per ABI)
abiFilters += listOf("armeabi-v7a", "arm64-v8a", "x86", "x86_64")
diff --git a/apps/macos/Sources/OpenClaw/Resources/Info.plist b/apps/macos/Sources/OpenClaw/Resources/Info.plist
index 8605ee1264d..4a6f9003f75 100644
--- a/apps/macos/Sources/OpenClaw/Resources/Info.plist
+++ b/apps/macos/Sources/OpenClaw/Resources/Info.plist
@@ -15,7 +15,7 @@
CFBundlePackageType
APPL
CFBundleShortVersionString
- 2026.3.11-beta.1
+ 2026.3.11
CFBundleVersion
202603110
CFBundleIconFile
diff --git a/package.json b/package.json
index d84428da146..9c1100bc49f 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
{
"name": "openclaw",
- "version": "2026.3.11-beta.1",
+ "version": "2026.3.11",
"description": "Multi-channel AI gateway with extensible messaging integrations",
"keywords": [],
"homepage": "https://github.com/openclaw/openclaw#readme",