diff --git a/CHANGES.md b/CHANGES.md
index b377f4f5..fe32cc47 100644
--- a/CHANGES.md
+++ b/CHANGES.md
@@ -1,6 +1,16 @@
-## v5.10.0 (unreleased)
+## v5.11.0 (unreleased)
 
-## v5.9.0 (2026-04-15)
+## v5.10.0 (2026-03-10)
+
+* Add `--auth` flag to `koyeb service create`, `koyeb service update`, and `koyeb deploy` to add security policies (basic auth or API key) to all routes. Supports referencing secrets with `{{secret.SECRET_NAME}}` syntax. Use `--auth-disable` to remove all security policies.
+
+## v5.9.1 (2026-01-19)
+
+* Add `koyeb sandbox` subcommand for managing interactive sandbox environments. Sandboxes are created with `koyeb service create --type=sandbox` and support running commands, managing processes, filesystem operations, and port exposure.
+* Add `koyeb service scale` commands (`get`, `update`, `delete`) for manual scaling of services, with support for per-region scaling using `--scale region:instances` format.
+* Add `--light-sleep-delay` and `--deep-sleep-delay` flags to `koyeb service create`, `koyeb service update`, and `koyeb deploy` to configure how long an idle service waits before entering light sleep or deep sleep mode. Set to `0` to disable. Only available when `--min-scale` is `0`.
+
+## v5.9.0 (2026-01-05)
 
 * Add lifecycle management flags to automatically delete apps and services:
   * `--delete-when-empty` for `koyeb app create` and `koyeb app update` - Automatically delete the app after the last service is deleted. Empty apps created without services are not deleted.
diff --git a/docs/reference.md b/docs/reference.md
index ff4daaf7..9caed8ea 100644
--- a/docs/reference.md
+++ b/docs/reference.md
@@ -3009,41 +3009,6 @@ $> koyeb sandbox expose-port myapp/mysandbox 8080
 
 * [koyeb sandbox](#koyeb-sandbox)	 - Sandbox - interactive execution environments
 
-## koyeb sandbox fs
-
-Filesystem operations
-
-### Options
-
-```
-  -h, --help   help for fs
-```
-
-### Options inherited from parent commands
-
-```
-  -c, --config string         config file (default is $HOME/.koyeb.yaml)
-  -d, --debug                 enable the debug output
-      --debug-full            do not hide sensitive information (tokens) in the debug output
-      --force-ascii           only output ascii characters (no unicode emojis)
-      --full                  do not truncate output
-      --organization string   organization ID
-  -o, --output output         output format (yaml,json,table)
-      --token string          API token
-      --url string            url of the api (default "https://app.koyeb.com")
-```
-
-
-
-* [koyeb sandbox](#koyeb-sandbox)	 - Sandbox - interactive execution environments
-* [koyeb sandbox fs download](#koyeb-sandbox-fs-download)	 - Download a file from the sandbox
-* [koyeb sandbox fs ls](#koyeb-sandbox-fs-ls)	 - List directory contents in the sandbox
-* [koyeb sandbox fs mkdir](#koyeb-sandbox-fs-mkdir)	 - Create a directory in the sandbox
-* [koyeb sandbox fs read](#koyeb-sandbox-fs-read)	 - Read a file from the sandbox
-* [koyeb sandbox fs rm](#koyeb-sandbox-fs-rm)	 - Remove a file or directory from the sandbox
-* [koyeb sandbox fs upload](#koyeb-sandbox-fs-upload)	 - Upload a local file or directory to the sandbox (max 1G per file)
-* [koyeb sandbox fs write](#koyeb-sandbox-fs-write)	 - Write content to a file in the sandbox
-
 ## koyeb sandbox fs download
 
 Download a file from the sandbox
@@ -3290,6 +3255,41 @@ $> koyeb sandbox fs write myapp/mysandbox /tmp/script.py -f ./local-script.py
 
 * [koyeb sandbox fs](#koyeb-sandbox-fs)	 - Filesystem operations
 
+## koyeb sandbox fs
+
+Filesystem operations
+
+### Options
+
+```
+  -h, --help   help for fs
+```
+
+### Options inherited from parent commands
+
+```
+  -c, --config string         config file (default is $HOME/.koyeb.yaml)
+  -d, --debug                 enable the debug output
+      --debug-full            do not hide sensitive information (tokens) in the debug output
+      --force-ascii           only output ascii characters (no unicode emojis)
+      --full                  do not truncate output
+      --organization string   organization ID
+  -o, --output output         output format (yaml,json,table)
+      --token string          API token
+      --url string            url of the api (default "https://app.koyeb.com")
+```
+
+
+
+* [koyeb sandbox](#koyeb-sandbox)	 - Sandbox - interactive execution environments
+* [koyeb sandbox fs download](#koyeb-sandbox-fs-download)	 - Download a file from the sandbox
+* [koyeb sandbox fs ls](#koyeb-sandbox-fs-ls)	 - List directory contents in the sandbox
+* [koyeb sandbox fs mkdir](#koyeb-sandbox-fs-mkdir)	 - Create a directory in the sandbox
+* [koyeb sandbox fs read](#koyeb-sandbox-fs-read)	 - Read a file from the sandbox
+* [koyeb sandbox fs rm](#koyeb-sandbox-fs-rm)	 - Remove a file or directory from the sandbox
+* [koyeb sandbox fs upload](#koyeb-sandbox-fs-upload)	 - Upload a local file or directory to the sandbox (max 1G per file)
+* [koyeb sandbox fs write](#koyeb-sandbox-fs-write)	 - Write content to a file in the sandbox
+
 ## koyeb sandbox health
 
 Check sandbox health status