diff --git a/.versionbot/CHANGELOG.yml b/.versionbot/CHANGELOG.yml
index 1d15abb3..ada1284a 100644
--- a/.versionbot/CHANGELOG.yml
+++ b/.versionbot/CHANGELOG.yml
@@ -1,3 +1,56 @@
+- commits:
+    - subject: Update balena-yocto-scripts to 7b65acc0280a2239d7f8fcfd7260151d97b6f3d5
+      hash: 4d6354f55c4ac7cfed99c7458b816275513a4b67
+      body: Update balena-yocto-scripts
+      footer:
+        Changelog-entry: Update balena-yocto-scripts to 7b65acc0280a2239d7f8fcfd7260151d97b6f3d5
+        changelog-entry: Update balena-yocto-scripts to 7b65acc0280a2239d7f8fcfd7260151d97b6f3d5
+      author: Self-hosted Renovate Bot
+      nested:
+        - commits:
+            - subject: use token to fetch private contracts
+              hash: acfc8d20ce8dd4b29eae67679dd1a89ffcc75c7c
+              body: ""
+              footer:
+                Change-type: patch
+                change-type: patch
+                Signed-off-by: Ryan Cooke <ryan@balena.io>
+                signed-off-by: Ryan Cooke <ryan@balena.io>
+              author: rcooke-warwick
+              nested: []
+            - subject: unroll balena_lib_build_contract function
+              hash: 82c9e482f3bfb0fcd960c455f2c8ff0c42c98baa
+              body: ""
+              footer:
+                Change-type: patch
+                change-type: patch
+                Signed-off-by: Ryan Cooke <ryan@balena.io>
+                signed-off-by: Ryan Cooke <ryan@balena.io>
+              author: rcooke-warwick
+              nested: []
+            - subject: unroll balena_api_is_dt_private function
+              hash: cc3102dbb1348ee563b08dfd3afd37daaa0404ca
+              body: >
+                when building + deploying or a private DT , the check to see if
+                the DT is private fails. This is due to
+                https://github.com/balena-os/balena-yocto-scripts/blob/master/automation/include/balena-api.inc#L424
+                using this function:
+                https://github.com/balena-os/balena-yocto-scripts/blob/master/automation/include/balena-lib.inc#L191
+                - which uses the jenkins deployTo variable to select the correct
+                api url and token.
+              footer:
+                Change-type: patch
+                change-type: patch
+                Signed-off-by: Ryan Cooke <ryan@balena.io>
+                signed-off-by: Ryan Cooke <ryan@balena.io>
+              author: rcooke-warwick
+              nested: []
+          version: balena-yocto-scripts-1.25.9
+          title: ""
+          date: 2024-07-22T16:18:49.689Z
+  version: 5.4.1+rev4
+  title: ""
+  date: 2024-07-22T21:22:08.116Z
 - commits:
     - subject: Update layers/meta-rust to d42984ff9a9fad9ced37d95a89af1b2b84f957e9
       hash: 931c659e36ae354cb358118f6f0e884265e5591f
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 3cb9d1bb..93ff93a2 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,6 +1,23 @@
 Change log
 -----------
 
+# v5.4.1+rev4
+## (2024-07-22)
+
+
+<details>
+<summary> Update balena-yocto-scripts to 7b65acc0280a2239d7f8fcfd7260151d97b6f3d5 [Self-hosted Renovate Bot] </summary>
+
+> ## balena-yocto-scripts-1.25.9
+> ### (2024-07-22)
+> 
+> * use token to fetch private contracts [rcooke-warwick]
+> * unroll balena_lib_build_contract function [rcooke-warwick]
+> * unroll balena_api_is_dt_private function [rcooke-warwick]
+> 
+
+</details>
+
 # v5.4.1+rev3
 ## (2024-07-22)
 
diff --git a/VERSION b/VERSION
index cb198f2b..88cf08ed 100644
--- a/VERSION
+++ b/VERSION
@@ -1 +1 @@
-5.4.1+rev3
\ No newline at end of file
+5.4.1+rev4
\ No newline at end of file