diff --git a/ChangeLog b/ChangeLog
index c639be34..c09d6844 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -1,3 +1,8 @@
+# Version 2.1.4
+ - Fixes a regression from version 2.1.3: when cloaking was enabled,
+blocked responses were returned for records that were not A/AAAA/PTR
+even for names that were not in the cloaked list.
+
 # Version 2.1.3
  - DNS-over-HTTP/3 (QUIC) should be more reliable. In particular,
 version 2.1.2 required another (non-QUIC) resolver to be present for
diff --git a/dnscrypt-proxy/main.go b/dnscrypt-proxy/main.go
index 1c8736bc..94ab9a8b 100644
--- a/dnscrypt-proxy/main.go
+++ b/dnscrypt-proxy/main.go
@@ -15,7 +15,7 @@ import (
 )
 
 const (
-	AppVersion            = "2.1.3"
+	AppVersion            = "2.1.4"
 	DefaultConfigFileName = "dnscrypt-proxy.toml"
 )