diff --git a/.github/workflows/_data-plane.yml b/.github/workflows/_data-plane.yml
index 98e0b627d..bc06bdf93 100644
--- a/.github/workflows/_data-plane.yml
+++ b/.github/workflows/_data-plane.yml
@@ -76,7 +76,7 @@ jobs:
       matrix:
         include:
           # mark:next-gateway-version
-          - release_name: gateway-1.4.17
+          - release_name: gateway-1.4.18
             config_name: release-drafter-gateway.yml
           # mark:next-headless-version
           - release_name: headless-client-1.5.4
@@ -234,9 +234,9 @@ jobs:
             artifact: firezone-gateway
             image_name: gateway
             # mark:next-gateway-version
-            release_name: gateway-1.4.17
+            release_name: gateway-1.4.18
             # mark:next-gateway-version
-            version: 1.4.17
+            version: 1.4.18
           - package: http-test-server
             artifact: http-test-server
             image_name: http-test-server
@@ -432,7 +432,7 @@ jobs:
           - name: relay
           - name: gateway
             # mark:next-gateway-version
-            version: 1.4.17
+            version: 1.4.18
           - name: client
             # mark:next-client-version
             version: 1.0.6
diff --git a/rust/Cargo.lock b/rust/Cargo.lock
index d62366a7e..3992719ef 100644
--- a/rust/Cargo.lock
+++ b/rust/Cargo.lock
@@ -2391,7 +2391,7 @@ dependencies = [
 
 [[package]]
 name = "firezone-gateway"
-version = "1.4.17"
+version = "1.4.18"
 dependencies = [
  "anyhow",
  "backoff",
diff --git a/rust/gateway/Cargo.toml b/rust/gateway/Cargo.toml
index f11226791..46960023c 100644
--- a/rust/gateway/Cargo.toml
+++ b/rust/gateway/Cargo.toml
@@ -1,7 +1,7 @@
 [package]
 name = "firezone-gateway"
 # mark:next-gateway-version
-version = "1.4.17"
+version = "1.4.18"
 edition = { workspace = true }
 license = { workspace = true }
 # See more keys and their definitions at https://doc.rust-lang.org/cargo/reference/manifest.html
diff --git a/scripts/bump-versions.sh b/scripts/bump-versions.sh
index e72c89df2..846cad05d 100755
--- a/scripts/bump-versions.sh
+++ b/scripts/bump-versions.sh
@@ -198,8 +198,8 @@ function headless() {
 # 3. Run `scripts/bump-versions.sh gateway` to update the versions in the codebase.
 # 4. Commit the changes and open a PR.
 function gateway() {
-    current_gateway_version="1.4.16"
-    next_gateway_version="1.4.17"
+    current_gateway_version="1.4.17"
+    next_gateway_version="1.4.18"
 
     update_changelog "website/src/components/Changelog/Gateway.tsx" "$current_gateway_version"
     find website -type f -name "redirects.js" -exec sed "${SEDARG[@]}" -e '/mark:current-gateway-version/{n;s/[0-9]\{1,\}\.[0-9]\{1,\}\.[0-9]\{1,\}/'"${current_gateway_version}"'/g;}' {} \;
diff --git a/website/redirects.js b/website/redirects.js
index c9c995230..8c19d38a2 100644
--- a/website/redirects.js
+++ b/website/redirects.js
@@ -105,21 +105,21 @@ module.exports = [
     source: "/dl/firezone-gateway/latest/x86_64",
     destination:
       // mark:current-gateway-version
-      "https://www.github.com/firezone/firezone/releases/download/gateway-1.4.16/firezone-gateway_1.4.16_x86_64",
+      "https://www.github.com/firezone/firezone/releases/download/gateway-1.4.17/firezone-gateway_1.4.17_x86_64",
     permanent: false,
   },
   {
     source: "/dl/firezone-gateway/latest/aarch64",
     destination:
       // mark:current-gateway-version
-      "https://www.github.com/firezone/firezone/releases/download/gateway-1.4.16/firezone-gateway_1.4.16_aarch64",
+      "https://www.github.com/firezone/firezone/releases/download/gateway-1.4.17/firezone-gateway_1.4.17_aarch64",
     permanent: false,
   },
   {
     source: "/dl/firezone-gateway/latest/armv7",
     destination:
       // mark:current-gateway-version
-      "https://www.github.com/firezone/firezone/releases/download/gateway-1.4.16/firezone-gateway_1.4.16_armv7",
+      "https://www.github.com/firezone/firezone/releases/download/gateway-1.4.17/firezone-gateway_1.4.17_armv7",
     permanent: false,
   },
   /*
diff --git a/website/src/app/api/releases/route.ts b/website/src/app/api/releases/route.ts
index 3957cf34a..d00c20c8a 100644
--- a/website/src/app/api/releases/route.ts
+++ b/website/src/app/api/releases/route.ts
@@ -13,7 +13,7 @@ export async function GET(_req: NextRequest) {
     // mark:current-headless-version
     headless: "1.5.3",
     // mark:current-gateway-version
-    gateway: "1.4.16",
+    gateway: "1.4.17",
   };
 
   return NextResponse.json(versions, {
diff --git a/website/src/components/Changelog/Gateway.tsx b/website/src/components/Changelog/Gateway.tsx
index ed5cdfaaf..5f2cc96f7 100644
--- a/website/src/components/Changelog/Gateway.tsx
+++ b/website/src/components/Changelog/Gateway.tsx
@@ -22,7 +22,8 @@ export default function Gateway() {
 
   return (
     <Entries downloadLinks={downloadLinks} title="Gateway">
-      <Unreleased>
+      <Unreleased></Unreleased>
+      <Entry version="1.4.17" date={new Date("2025-10-16")}>
         <ChangeItem pull="10367">
           Fixes a rare CPU-spike issue in case a Client connected with many
           possible IPv6 addresses.
@@ -42,7 +43,7 @@ export default function Gateway() {
           Switches to user-space DNS resolution, allowing for accurate caching
           based on the TTL in the DNS response.
         </ChangeItem>
-      </Unreleased>
+      </Entry>
       <Entry version="1.4.16" date={new Date("2025-09-10")}>
         <ChangeItem pull="10231">
           Remove the FIREZONE_NUM_TUN_THREADS env variable. The Gateway will now