diff --git a/CHANGELOG.md b/CHANGELOG.md
index d1f903b09..1430fcbae 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -6,6 +6,18 @@ Dependencies are updated to the latest available version during each release. Th
 
 <!-- scriv-insert-here -->
 
+<a id='changelog-9.3.0'></a>
+## 9.3.0 (2023-07-26)
+
+### New features
+
+- To configure Gafaelfawr to use the cluster-internal PostgreSQL service, use the Helm chart setting `config.internalDatabase` rather than setting an explicit URL. Setting `config.databaseUrl` to the internal PostgreSQL URL will still work for existing deployments, but using `config.internalDatabase` instead will be required in the future for correct secrets management.
+- Gafaelfawr can now listen on additional hostnames specified by setting `ingress.additionalHosts` in the Helm configuration. Only token authentication will be supported for ingresses using those hostnames; interactive browser authentication will not work.
+
+### Bug fixes
+
+- Restore the newline after the output from `gafaelfawr generate-session-secret` and `gafaelfawr generate-token`, accidentally dropped in 9.2.1.
+
 <a id='changelog-9.2.2'></a>
 ## 9.2.2 (2023-06-01)
 
diff --git a/changelog.d/20230605_084645_rra_DM_39519.md b/changelog.d/20230605_084645_rra_DM_39519.md
deleted file mode 100644
index 3be144061..000000000
--- a/changelog.d/20230605_084645_rra_DM_39519.md
+++ /dev/null
@@ -1,3 +0,0 @@
-### Bug fixes
-
-- Restore the newline after the output from `gafaelfawr generate-session-secret` and `gafaelfawr generate-token`, accidentally dropped in 9.2.1.
diff --git a/changelog.d/20230726_094301_rra_helm_docs.md b/changelog.d/20230726_094301_rra_helm_docs.md
deleted file mode 100644
index 07e7794a2..000000000
--- a/changelog.d/20230726_094301_rra_helm_docs.md
+++ /dev/null
@@ -1,4 +0,0 @@
-### New features
-
-- To configure Gafaelfawr to use the cluster-internal PostgreSQL service, use the Helm chart setting `config.internalDatabase` rather than setting an explicit URL. Setting `config.databaseUrl` to the internal PostgreSQL URL will still work for existing deployments, but using `config.internalDatabase` instead will be required in the future for correct secrets management.
-- Gafaelfawr can now listen on additional hostnames specified by setting `ingress.additionalHosts` in the Helm configuration. Only token authentication will be supported for ingresses using those hostnames; interactive browser authentication will not work.