diff --git a/.gitignore b/.gitignore
index e25546c..142caad 100644
--- a/.gitignore
+++ b/.gitignore
@@ -96,3 +96,4 @@
 /cockpit-123.tar.xz
 /cockpit-124.tar.xz
 /cockpit-125.tar.xz
+/cockpit-126.tar.xz
diff --git a/cockpit.spec b/cockpit.spec
index f6c84f2..b8a3792 100644
--- a/cockpit.spec
+++ b/cockpit.spec
@@ -1,5 +1,5 @@
 # This spec file has been automatically updated
-Version:	125
+Version:	126
 Release: 1%{?dist}
 #
 # This file is maintained at the following location:
@@ -549,6 +549,20 @@ pulls in some necessary packages via dependencies.
 
 # The changelog is automatically generated and merged
 %changelog
+* Wed Dec 14 2016 Stef Walter <<stefw@redhat.com>> - 126-1
+- Show security scan information about containers
+- Choose whether password is cached and reused on login screen
+- Allow renaming of active devices in networking interface
+- More clearly indicate when checking network connectivity
+- The remotectl command can now combine certificate and key files
+- Support Openshift's certificate autogeneration when used as a pod
+- The remotectl tool now checks for keys in certificate files
+- Domain join operations can now be properly cancelled
+- Make Kerberos authentication work even if gss-proxy is in use
+- Javascript code can now export DBus interfaces
+- When proxied, support X-Forwarded-Proto
+- Ignore block devices with a zero size in the storage interface
+
 * Thu Nov 24 2016 Stef Walter <<stefw@redhat.com>> - 125-1
 - Cockpit is now properly translatable
 - Display OSTree signatures
diff --git a/sources b/sources
index 8b6b615..1ea0f0a 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-1d1be1a76e530ec8c2e0195bcf5fb3f7  cockpit-125.tar.xz
+e22b6225126bff951204c984363e386a  cockpit-126.tar.xz