diff --git a/knot-resolver.spec b/knot-resolver.spec
index 312dde3..747256c 100644
--- a/knot-resolver.spec
+++ b/knot-resolver.spec
@@ -2,13 +2,12 @@
 %{!?_pkgdocdir: %global _pkgdocdir %{_docdir}/%{name}}
 
 %define GPG_CHECK 1
-%define VERSION 5.3.2
 %define repodir %{_builddir}/%{name}-%{version}
 %define NINJA ninja-build
 
 Name:           knot-resolver
-Version:        %{VERSION}
-Release:        2%{?dist}
+Version:        5.4.0
+Release:        1%{?dist}
 Summary:        Caching full DNS Resolver
 
 License:        GPL-3.0-or-later
@@ -376,6 +375,9 @@ fi
 %endif
 
 %changelog
+* Thu Jul 29 2021 Jakub Ružička <jakub.ruzicka@nic.cz> - 5.4.0-1
+- update to upstream version 5.4.0
+
 * Thu Jul 22 2021 Fedora Release Engineering <releng@fedoraproject.org> - 5.3.2-2
 - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
 
diff --git a/sources b/sources
index a78e034..d65256b 100644
--- a/sources
+++ b/sources
@@ -1,2 +1,2 @@
-SHA512 (knot-resolver-5.3.2.tar.xz) = 180490f058d90d15f336bbce28a175d6660a4a98e88956071f26a40e2b9a14f57eea6b62b992f88011f80acda9418813d53c7f00753c97bcf6b527cf41cc0b8a
-SHA512 (knot-resolver-5.3.2.tar.xz.asc) = 0d73384f00c1cb7d9dcb27fac201d29cb1ebf4568f2ff6d0767296550fee7e753f15a69127d5f5e141d5739a8f0899e8ea63b44c50c6f7e7c1f58af7bfd9fe38
+SHA512 (knot-resolver-5.4.0.tar.xz) = f98086fa46969c3ca074cb15d7f4098778fc51bec4b08e2439b0ec4fca53ab66a8497dd49491bb180d48ed30104bf715c91d1bb42ed1b4756e6ca3abd3868e0e
+SHA512 (knot-resolver-5.4.0.tar.xz.asc) = 3c7363ee424fc6002cb8b313a5cc5c220a107d4962ae6f93c44282ad8943f00befa952b96689c8c19991597ffd1ab8afe54f398759d39fee6abaab7cb87d0037