diff --git a/CHANGELOG.md b/CHANGELOG.md
index 417fb0dc9..b81cca331 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -22,6 +22,15 @@ Code v99.99.999
 
 ## Unreleased
 
+## [4.99.4](https://github.com/coder/code-server/releases/tag/v4.99.4) - 2025-05-02
+
+Code v1.99.3
+
+### Security
+
+- Validate that ports in the path proxy are numbers, to prevent proxying to
+  arbitrary domains.
+
 ## [4.99.3](https://github.com/coder/code-server/releases/tag/v4.99.3) - 2025-04-17
 
 Code v1.99.3
diff --git a/ci/helm-chart/Chart.yaml b/ci/helm-chart/Chart.yaml
index f2619cca2..63c9483a5 100644
--- a/ci/helm-chart/Chart.yaml
+++ b/ci/helm-chart/Chart.yaml
@@ -15,9 +15,9 @@ type: application
 # This is the chart version. This version number should be incremented each time you make changes
 # to the chart and its templates, including the app version.
 # Versions are expected to follow Semantic Versioning (https://semver.org/)
-version: 3.26.3
+version: 3.26.4
 
 # This is the version number of the application being deployed. This version number should be
 # incremented each time you make changes to the application. Versions are not expected to
 # follow Semantic Versioning. They should reflect the version the application is using.
-appVersion: 4.99.3
+appVersion: 4.99.4
diff --git a/ci/helm-chart/values.yaml b/ci/helm-chart/values.yaml
index 845327871..3790acc7e 100644
--- a/ci/helm-chart/values.yaml
+++ b/ci/helm-chart/values.yaml
@@ -6,7 +6,7 @@ replicaCount: 1
 
 image:
   repository: codercom/code-server
-  tag: '4.99.3'
+  tag: '4.99.4'
   pullPolicy: Always
 
 # Specifies one or more secrets to be used when pulling images from a