diff --git a/.release-please-manifest.json b/.release-please-manifest.json
index c3cfcab6..ecd9db41 100644
--- a/.release-please-manifest.json
+++ b/.release-please-manifest.json
@@ -1,3 +1,3 @@
 {
-  ".": "1.20.3"
+  ".": "1.20.4"
 }
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 63978403..6947040b 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -7,6 +7,14 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 <!-- Example:
 
+## [1.20.4](https://github.com/rudderlabs/code-server/compare/v1.20.3...v1.20.4) (2026-10-31)
+
+
+### Bug Fixes
+
+* **deps:** bundle Node 22.23.4 in profiles code-server [SEC-782] ([#240](https://github.com/rudderlabs/code-server/issues/240)) ([1ec43f3](https://github.com/rudderlabs/code-server/commit/1ec43f332c0afe6e7551456154d5880825788b0a))
+* **docker:** pin pip, uv and certifi to reject the eMudhra chains ([#239](https://github.com/rudderlabs/code-server/issues/239)) ([40199ee](https://github.com/rudderlabs/code-server/commit/40199ee367864cb55c404d8557ab9ebe34de1e3a))
+
 ## [1.20.3](https://github.com/rudderlabs/code-server/compare/v1.20.2...v1.20.3) (2026-09-16)
 
 
diff --git a/Dockerfile b/Dockerfile
index 81a1785d..7f6f8a1f 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -62,7 +62,7 @@ COPY custom-strings.json /home/codeuser/custom-strings.json
 
 # Install code-server from .deb package
 # x-release-please-start-version
-ARG CODE_SERVER_VERSION=1.20.3
+ARG CODE_SERVER_VERSION=1.20.4
 # x-release-please-end
 RUN (dpkg -i /tmp/code-server_*_${TARGETARCH}.deb || apt-get install -f -y) && \
   rm -f /tmp/code-server_*.deb /tmp/code-server*.rpm /tmp/code-server*.tar.gz
diff --git a/package-lock.json b/package-lock.json
index c9c69dfc..597ee8e1 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -1,12 +1,12 @@
 {
   "name": "code-server",
-  "version": "1.20.3",
+  "version": "1.20.4",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "code-server",
-      "version": "1.20.3",
+      "version": "1.20.4",
       "hasInstallScript": true,
       "license": "MIT",
       "dependencies": {
diff --git a/package.json b/package.json
index 521128e7..ddfd5e91 100644
--- a/package.json
+++ b/package.json
@@ -1,7 +1,7 @@
 {
   "name": "code-server",
   "license": "MIT",
-  "version": "1.20.3",
+  "version": "1.20.4",
   "description": "Run VS Code on a remote server.",
   "homepage": "https://github.com/rudderlabs/code-server",
   "bugs": {