diff --git a/pungi.spec b/pungi.spec
index 7683df3a..1dfa4737 100644
--- a/pungi.spec
+++ b/pungi.spec
@@ -1,8 +1,8 @@
 %{?python_enable_dependency_generator}
 
 Name:           pungi
-Version:        4.2.2
-Release:        3%{?dist}
+Version:        4.2.3
+Release:        1%{?dist}
 Summary:        Distribution compose tool
 
 License:        GPLv2
@@ -144,6 +144,35 @@ nosetests-3 --exe
 %{_bindir}/%{name}-wait-for-signed-ostree-handler
 
 %changelog
+* Thu Jun 11 2020 Lubomír Sedlář <lsedlar@redhat.com> - 4.2.3-1
+- Move test for unsigned packages with pkgset_koji_scratch_tasks to PkgsetPhase
+  class. (jkaluza)
+- Allow building compose with scratch builds defined by
+  `pkgset_koji_scratch_tasks`. (jkaluza)
+- createrepo: Allow making productid glob stricter (lsedlar)
+- docs: Remove outdated note (lsedlar)
+- createrepo: Add extra modulemd files to the repo (lsedlar)
+- pkgset: handle exception when using dogpile cache (hlin)
+- notification: Add compose_path into the messages (hlin)
+- gather: handle mirrorlist in kickstart (frederic.pierret)
+- Allow only creating unified ISO for specified arch (hlin)
+- docs: update doc for gather_lookaside_repos option (hlin)
+- Include the output of getisoimage in the error message (hlin)
+- tests: Patch time in CTS related tests (lsedlar)
+- Allow using Pungi Koji plugin for ostree phases. (jkaluza)
+- Allow getting the compose id from CTS (Compose Tracking Service). (jkaluza)
+- Fix flake8 issues (lsedlar)
+- Optimize the _link_file function to not call os.stat redundantly. This will
+  eliminate 2 calls to os.stat per one invocation of the _link_file function.
+  Assuming during the compose build 50000 files are linked, this change will
+  eliminate 100000 redundant calls to os.stat. (bkhomuts)
+- doc: explain sigkey behavior (kdreyer)
+- doc: explain tradeoffs with pkgset_allow_reuse (kdreyer)
+- doc: fix grammar for pkgset_allow_reuse setting (kdreyer)
+- Support --skip-branding option in lorax (hlin)
+- docs: Embed phases.svg directly (hlin)
+- Execute image_checksum phase right after the dependent phases (hlin)
+
 * Mon May 25 2020 Miro Hrončok <mhroncok@redhat.com> - 4.2.2-3
 - Rebuilt for Python 3.9
 
diff --git a/sources b/sources
index 81055d4c..5d179734 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (pungi-4.2.2.tar.bz2) = fef4e90d2cdd54a521e2f9509823421885a794ee31d910100305301a74fa4703efa4feac5ee3398e57233767594060b5647d864725ca3f59304ff523b3f8ae5a
+SHA512 (pungi-4.2.3.tar.bz2) = 941b762e2b65fa7551ff726ee201799f00dc5986141f5cd8ac83aa9552f2d3c1028d9bf768a7b57e7d6366d7d8e8c18c4ffa3b1a4cb318a552836f922696e119