diff --git a/CHANGELOG.md b/CHANGELOG.md
index f763b69aa..92c0d5e09 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -7,6 +7,27 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [1.9.4] - 2024-09-03
+
+### Added
+
+- #1181: Support UDP dialling with gvisor
+
+### Fixed
+
+- #1194: udp: fix endianness for port
+- #1191: fix rare panic when local index collision happens
+- #1185: Fix integer wraparound in the calculation of handshake timeouts on 32-bit targets
+
+### Changed
+
+- #1188: Make some Nebula state programmatically available via control object
+- #1171: github actions: use macos-latest
+- #1164: Add puncuation to doc comment
+- #1162: cleanup SK_MEMINFO vars
+- #1173: Switch most everything to netip in prep for ipv6 in the overlay
+- Various dependency updates. (#1190, #1174, #1168, #1167, #1161, #1147, #1146)
+
 ## [1.9.3] - 2024-06-06
 
 ### Fixed
@@ -644,7 +665,8 @@ created.)
 
 - Initial public release.
 
-[Unreleased]: https://github.com/slackhq/nebula/compare/v1.9.3...HEAD
+[Unreleased]: https://github.com/slackhq/nebula/compare/v1.9.4...HEAD
+[1.9.4]: https://github.com/slackhq/nebula/releases/tag/v1.9.4
 [1.9.3]: https://github.com/slackhq/nebula/releases/tag/v1.9.3
 [1.9.2]: https://github.com/slackhq/nebula/releases/tag/v1.9.2
 [1.9.1]: https://github.com/slackhq/nebula/releases/tag/v1.9.1