diff --git a/CHANGELOG.md b/CHANGELOG.md
index d50a446..d065da5 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,5 +1,10 @@
 # Changelog
 
+## v0.6.4
+
+- Point to specific commit for 3rd-party Github action
+- Secure href attribute in 404 page to prevent XSS vulnerabilities
+
 ## v0.6.3
 
 - Adds support for the composer installers v2 package
diff --git a/asset-loader.php b/asset-loader.php
index 45f2cca..79214a8 100644
--- a/asset-loader.php
+++ b/asset-loader.php
@@ -13,7 +13,7 @@
  * Plugin Name: Asset Loader
  * Plugin URI:  https://github.com/humanmade/asset-loader
  * Description: Utilities to seamlessly consume Webpack-bundled assets in WordPress themes & plugins.
- * Version:     0.6.3
+ * Version:     0.6.4
  * Author:      K Adam White
  * Author URI:  http://kadamwhite.com
  * License:     GPL-2.0+