diff --git a/knot-resolver.spec b/knot-resolver.spec
index ef98bfa..70595d3 100644
--- a/knot-resolver.spec
+++ b/knot-resolver.spec
@@ -1,7 +1,7 @@
 %global _hardened_build 1
 
 %define GPG_CHECK 1
-%define VERSION 2.4.1
+%define VERSION 3.0.0
 %define repodir %{_builddir}/%{name}-%{version}
 
 Name:           knot-resolver
@@ -21,9 +21,6 @@ ExclusiveArch:	%{ix86} x86_64
 ExclusiveArch:	%{arm} aarch64 %{ix86} x86_64
 %endif
 
-Source2:        kresd.conf
-Source3:        root.keys
-
 %if 0%{GPG_CHECK}
 Source1:        https://secure.nic.cz/files/%{name}/%{name}-%{version}.tar.xz.asc
 # PGP keys used to sign upstream releases
@@ -40,7 +37,7 @@ BuildRequires:  gcc-c++
 BuildRequires:  pkgconfig(cmocka)
 BuildRequires:  pkgconfig(gnutls)
 BuildRequires:  pkgconfig(libedit)
-BuildRequires:  pkgconfig(libknot) >= 2.6.7
+BuildRequires:  pkgconfig(libknot) >= 2.7.1
 BuildRequires:  pkgconfig(libzscanner) >= 2.4.2
 BuildRequires:  pkgconfig(libdnssec) >= 2.3.1
 BuildRequires:  pkgconfig(libsystemd)
@@ -74,7 +71,7 @@ Requires(preun):	systemd
 Requires(postun):	systemd
 
 %description
-The Knot DNS Resolver is a caching full resolver implementation written in C
+The Knot Resolver is a caching full resolver implementation written in C
 and LuaJIT, including both a resolver library and a daemon. Modular
 architecture of the library keeps the core tiny and efficient, and provides
 a state-machine like API for extensions.
@@ -84,20 +81,20 @@ To start using it, start a single kresd instance:
 $ systemctl start kresd@1.service
 
 %package devel
-Summary:        Development headers for Knot DNS Resolver
+Summary:        Development headers for Knot Resolver
 Requires:       %{name}%{?_isa} = %{version}-%{release}
 
 %description devel
-The package contains development headers for Knot DNS Resolver.
+The package contains development headers for Knot Resolver.
 
 %if 0%{?fedora}
 %package doc
-Summary:        Documentation for Knot DNS Resolver
+Summary:        Documentation for Knot Resolver
 BuildArch:      noarch
 Requires:       %{name} = %{version}-%{release}
 
 %description doc
-Documentation for Knot DNS Resolver
+Documentation for Knot Resolver
 %endif
 
 %prep
@@ -135,8 +132,8 @@ chmod 0644 %{buildroot}%{_pkgdocdir}/config.*
 # install configuration files
 mkdir -p %{buildroot}%{_sysconfdir}
 install -m 0755 -d %{buildroot}%{_sysconfdir}/knot-resolver
-install -m 0644 -p %SOURCE2 %{buildroot}%{_sysconfdir}/knot-resolver/kresd.conf
-install -m 0664 -p %SOURCE3 %{buildroot}%{_sysconfdir}/knot-resolver/root.keys
+install -m 0644 -p %{repodir}/distro/common/kresd.conf %{buildroot}%{_sysconfdir}/knot-resolver/kresd.conf
+install -m 0664 -p %{repodir}/distro/common/root.keys %{buildroot}%{_sysconfdir}/knot-resolver/root.keys
 
 # install systemd units and doc
 mkdir -p %{buildroot}%{_unitdir}
@@ -173,7 +170,7 @@ rm -r %{buildroot}%{_libdir}/kdns_modules/{http,http.lua}
 
 %pre
 getent group knot-resolver >/dev/null || groupadd -r knot-resolver
-getent passwd knot-resolver >/dev/null || useradd -r -g knot-resolver -d %{_sysconfdir}/knot-resolver -s /sbin/nologin -c "Knot DNS Resolver" knot-resolver
+getent passwd knot-resolver >/dev/null || useradd -r -g knot-resolver -d %{_sysconfdir}/knot-resolver -s /sbin/nologin -c "Knot Resolver" knot-resolver
 
 %post
 %systemd_post 'kresd@*.service'
@@ -246,6 +243,42 @@ fi
 %endif
 
 %changelog
+* Mon Aug 20 2018 Tomas Krizek <tomas.krizek@nic.cz> - 3.0.0-1
+Knot Resolver 3.0.0 (2018-08-20)
+================================
+
+Incompatible changes
+--------------------
+- cache: fail lua operations if cache isn't open yet (!639)
+  By default cache is opened *after* reading the configuration,
+  and older versions were silently ignoring cache operations.
+  Valid configuration must open cache using `cache.open()` or `cache.size =`
+  before executing cache operations like `cache.clear()`.
+- libknot >= 2.7.1 is required, which brings also larger API changes
+- in case you wrote custom Lua modules, please consult
+  https://knot-resolver.readthedocs.io/en/latest/lib.html#incompatible-changes-since-3-0-0
+- in case you wrote custom C modules, please see compile against
+  Knot DNS 2.7 and adjust your module according to messages from C compiler
+- DNS cookie module (RFC 7873) is not available in this release,
+  it will be later reworked to reflect development in IEFT dnsop working group
+- version module was permanently removed because it was not really used by users;
+  if you want to receive notifications abou new releases please subscribe to
+  https://lists.nic.cz/cgi-bin/mailman/listinfo/knot-resolver-announce
+
+Bugfixes
+--------
+- fix multi-process race condition in trust anchor maintenance (!643)
+- ta_sentinel: also consider static trust anchors not managed via RFC 5011
+
+Improvements
+------------
+- reorder_RR() implementation is brought back
+- bring in performace improvements provided by libknot 2.7
+- cache.clear() has a new, more powerful API
+- cache documentation was improved
+- old name "Knot DNS Resolver" is replaced by unambiguous "Knot Resolver"
+  to prevent confusion with "Knot DNS" authoritative server
+
 * Thu Aug 02 2018 Tomas Krizek <tomas.krizek@nic.cz> - 2.4.1-1
 Knot Resolver 2.4.1 (2018-08-02)
 ================================
diff --git a/sources b/sources
index ab8dc4f..98c0324 100644
--- a/sources
+++ b/sources
@@ -1,2 +1,2 @@
-SHA512 (knot-resolver-2.4.1.tar.xz) = f033c39f9e5726c1db79780c80dc76f201a621f749bdaafec530919fad7e8b9b56b9e12389de72c69a9db0a7da57552c0c948570c9eadcd90e7d955b9da312c8
-SHA512 (knot-resolver-2.4.1.tar.xz.asc) = 25b3aa00296225d219580d8ff82e7a76078c2d5e18e825e93c73a66dff081467bcf5cc3adb4c0001bafcf889eac1f0d883fb1c207518549387d163a11f38c90c
+SHA512 (knot-resolver-3.0.0.tar.xz) = 044b5269d69e1f9b502709910533f00b060a53524c1ad1d19b78ec6fd474edef5cddfcc6e3a4123d1ab67b3e21fcde5891b463cd67b78da2fa69226bf1d34fa1
+SHA512 (knot-resolver-3.0.0.tar.xz.asc) = 9370ed04c8b488954ae227d4aba085decf85d0cf18f7c5d6cc2832a6c9bb8fb8e43ec7229112eb2beb176287eda50cd3e0b91f0d5212dff6870fe326c0065e10