diff --git a/CHANGELOG.md b/CHANGELOG.md
index e3fa4588..c654dbd7 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -5,6 +5,12 @@ This project employs a versioning scheme described in [RELEASE.md](RELEASE.md#ve
 
 ## [Unreleased]
 
+## [1.26.4]
+
+### Changed
+
+- Backport #675 to enable DNSSEC validation [#676](https://github.com/cybozu-go/cke/pull/676)
+
 ## [1.26.3]
 
 ### Added
@@ -77,7 +83,8 @@ This project employs a versioning scheme described in [RELEASE.md](RELEASE.md#ve
 - See [release-1.13/CHANGELOG.md](https://github.com/cybozu-go/cke/blob/release-1.13/CHANGELOG.md) for changes in CKE 1.13.
 - See [release-1.12/CHANGELOG.md](https://github.com/cybozu-go/cke/blob/release-1.12/CHANGELOG.md) for changes in CKE 1.12.
 
-[Unreleased]: https://github.com/cybozu-go/cke/compare/v1.26.3...HEAD
+[Unreleased]: https://github.com/cybozu-go/cke/compare/v1.26.4...HEAD
+[1.26.4]: https://github.com/cybozu-go/cke/compare/v1.26.3...v1.26.4
 [1.26.3]: https://github.com/cybozu-go/cke/compare/v1.26.2...v1.26.3
 [1.26.2]: https://github.com/cybozu-go/cke/compare/v1.26.1...v1.26.2
 [1.26.1]: https://github.com/cybozu-go/cke/compare/v1.26.0...v1.26.1
diff --git a/version.go b/version.go
index ad0c08c2..b43ff1b2 100644
--- a/version.go
+++ b/version.go
@@ -1,7 +1,7 @@
 package cke
 
 // Version represents current cke version
-const Version = "1.26.3"
+const Version = "1.26.4"
 
 // ConfigVersion represents the current configuration scheme
 // of how CKE constructs its Kubernetes cluster.