diff --git a/.github/workflows/_data-plane.yml b/.github/workflows/_data-plane.yml
index 2d179e64e..4229f7799 100644
--- a/.github/workflows/_data-plane.yml
+++ b/.github/workflows/_data-plane.yml
@@ -76,7 +76,7 @@ jobs:
       matrix:
         include:
           # mark:next-gateway-version
-          - release_name: gateway-1.4.18
+          - release_name: gateway-1.4.19
             config_name: release-drafter-gateway.yml
           # mark:next-headless-version
           - release_name: headless-client-1.5.5
@@ -234,9 +234,9 @@ jobs:
             artifact: firezone-gateway
             image_name: gateway
             # mark:next-gateway-version
-            release_name: gateway-1.4.18
+            release_name: gateway-1.4.19
             # mark:next-gateway-version
-            version: 1.4.18
+            version: 1.4.19
           - package: http-test-server
             artifact: http-test-server
             image_name: http-test-server
@@ -453,7 +453,7 @@ jobs:
           - name: relay
           - name: gateway
             # mark:next-gateway-version
-            version: 1.4.18
+            version: 1.4.19
           - name: client
             # mark:next-client-version
             version: 1.0.6
diff --git a/rust/Cargo.lock b/rust/Cargo.lock
index c74fbabdc..932555bc5 100644
--- a/rust/Cargo.lock
+++ b/rust/Cargo.lock
@@ -2410,7 +2410,7 @@ dependencies = [
 
 [[package]]
 name = "firezone-gateway"
-version = "1.4.18"
+version = "1.4.19"
 dependencies = [
  "anyhow",
  "backoff",
diff --git a/rust/gateway/Cargo.toml b/rust/gateway/Cargo.toml
index dcd7c55eb..82a10f1dd 100644
--- a/rust/gateway/Cargo.toml
+++ b/rust/gateway/Cargo.toml
@@ -1,7 +1,7 @@
 [package]
 name = "firezone-gateway"
 # mark:next-gateway-version
-version = "1.4.18"
+version = "1.4.19"
 edition = { workspace = true }
 license = { workspace = true }
 description = "Gateway for the Firezone zero-trust access product."
diff --git a/scripts/bump-versions.sh b/scripts/bump-versions.sh
index 3e69452f1..09db25468 100755
--- a/scripts/bump-versions.sh
+++ b/scripts/bump-versions.sh
@@ -201,8 +201,8 @@ function headless() {
 # 3. Run `scripts/bump-versions.sh gateway` to update the versions in the codebase.
 # 4. Commit the changes and open a PR.
 function gateway() {
-    current_gateway_version="1.4.17"
-    next_gateway_version="1.4.18"
+    current_gateway_version="1.4.18"
+    next_gateway_version="1.4.19"
 
     update_changelog "website/src/components/Changelog/Gateway.tsx" "$current_gateway_version"
     update_version_marker "mark:current-gateway-version" "$current_gateway_version"
diff --git a/website/redirects.js b/website/redirects.js
index 9b38b7f97..920a2cad7 100644
--- a/website/redirects.js
+++ b/website/redirects.js
@@ -105,21 +105,21 @@ module.exports = [
     source: "/dl/firezone-gateway/latest/x86_64",
     destination:
       // mark:current-gateway-version
-      "https://www.github.com/firezone/firezone/releases/download/gateway-1.4.17/firezone-gateway_1.4.17_x86_64",
+      "https://www.github.com/firezone/firezone/releases/download/gateway-1.4.18/firezone-gateway_1.4.17_x86_64",
     permanent: false,
   },
   {
     source: "/dl/firezone-gateway/latest/aarch64",
     destination:
       // mark:current-gateway-version
-      "https://www.github.com/firezone/firezone/releases/download/gateway-1.4.17/firezone-gateway_1.4.17_aarch64",
+      "https://www.github.com/firezone/firezone/releases/download/gateway-1.4.18/firezone-gateway_1.4.17_aarch64",
     permanent: false,
   },
   {
     source: "/dl/firezone-gateway/latest/armv7",
     destination:
       // mark:current-gateway-version
-      "https://www.github.com/firezone/firezone/releases/download/gateway-1.4.17/firezone-gateway_1.4.17_armv7",
+      "https://www.github.com/firezone/firezone/releases/download/gateway-1.4.18/firezone-gateway_1.4.17_armv7",
     permanent: false,
   },
   /*
diff --git a/website/src/app/api/releases/route.ts b/website/src/app/api/releases/route.ts
index b8353e46c..397e26076 100644
--- a/website/src/app/api/releases/route.ts
+++ b/website/src/app/api/releases/route.ts
@@ -13,7 +13,7 @@ export async function GET() {
     // mark:current-headless-version
     headless: "1.5.4",
     // mark:current-gateway-version
-    gateway: "1.4.17",
+    gateway: "1.4.18",
   };
 
   return NextResponse.json(versions, {
diff --git a/website/src/components/Changelog/Gateway.tsx b/website/src/components/Changelog/Gateway.tsx
index ddb5a93d7..30e0990b6 100644
--- a/website/src/components/Changelog/Gateway.tsx
+++ b/website/src/components/Changelog/Gateway.tsx
@@ -22,7 +22,8 @@ export default function Gateway() {
 
   return (
     <Entries downloadLinks={downloadLinks} title="Gateway">
-      <Unreleased>
+      <Unreleased></Unreleased>
+      <Entry version="1.4.18" date={new Date("2025-11-10")}>
         <ChangeItem pull="10620">
           Adds a `--log-format` CLI option to output logs as JSON.
         </ChangeItem>
@@ -30,7 +31,7 @@ export default function Gateway() {
           Fixes an issue where packets for DNS resources would be routed to
           stale IPs after DNS record changes.
         </ChangeItem>
-      </Unreleased>
+      </Entry>
       <Entry version="1.4.17" date={new Date("2025-10-16")}>
         <ChangeItem pull="10367">
           Fixes a rare CPU-spike issue in case a Client connected with many