diff --git a/.gitignore b/.gitignore
index 914bf42..6e34325 100644
--- a/.gitignore
+++ b/.gitignore
@@ -83,3 +83,4 @@ mock-1.1.4.tar.gz
 /mock-1.4.18.tar.gz
 /mock-1.4.19.tar.gz
 /mock-1.4.20.tar.gz
+/mock-1.4.21.tar.gz
diff --git a/mock.spec b/mock.spec
index 5eb97b2..a578688 100644
--- a/mock.spec
+++ b/mock.spec
@@ -14,7 +14,7 @@
 
 Summary: Builds packages inside chroots
 Name: mock
-Version: 1.4.20
+Version: 1.4.21
 Release: 1%{?dist}
 License: GPLv2+
 # Source is created by
@@ -239,6 +239,13 @@ pylint-3 py/mockbuild/ py/*.py py/mockbuild/plugins/* || :
 %endif
 
 %changelog
+* Fri Nov 01 2019 Miroslav Suchý <msuchy@redhat.com> 1.4.21-1
+- copy distribution-gpg-keys if this is boostrap and we use container image
+- move podman initialization to buildroot.py [GH#380]
+- bootstrap: fix --install and --installdeps [RHBZ#1447627]
+- mock: selinuxfs, one more fix for nspawn [RHBZ#1756972]
+- mock: fix broken rpmbuildstate [GH#349]
+
 * Fri Oct 04 2019 Miroslav Suchý <msuchy@redhat.com> 1.4.20-1
 - /bin/mockchain wrapper around 'mock --chain' (praiskup@redhat.com)
 - mock: options for retrying packager managers' actions (praiskup@redhat.com)
diff --git a/sources b/sources
index 95e7907..bfeeaac 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (mock-1.4.20.tar.gz) = bbd2e291aa44a6c496d47e2a656a993af6f26c86005be4a817f6355d55e0d3c72d1f4318edfd6e4ea0d32209e8d3df6c5760e91602e8dad57ef6582d3995d03e
+SHA512 (mock-1.4.21.tar.gz) = 36de80878c7ccd48299c1522adfaead384815757c84c7756bd65e6971c498a13d69ca63e7babcedcf43aaa93937a67f6109c530e60af32908b8b3eec16d2315b