diff --git a/Makefile b/Makefile
index 821f3689bcb..69c36f7bf1c 100644
--- a/Makefile
+++ b/Makefile
@@ -54,7 +54,7 @@ SOURCES := $(shell find . -name "*.go" | grep -v test.go)
 # for more information, see https://github.com/solo-io/gloo/pull/9633
 # and
 # https://soloio.slab.com/posts/extended-http-methods-design-doc-40j7pjeu
-ENVOY_GLOO_IMAGE ?= quay.io/solo-io/envoy-gloo:1.30.2-patch2
+ENVOY_GLOO_IMAGE ?= quay.io/solo-io/envoy-gloo:1.30.4-patch1
 LDFLAGS := "-X github.com/solo-io/gloo/pkg/version.Version=$(VERSION)"
 GCFLAGS ?=
 
diff --git a/changelog/v1.17.0/envoy-1.30.4.yaml b/changelog/v1.17.0/envoy-1.30.4.yaml
new file mode 100644
index 00000000000..e6071fcaa5a
--- /dev/null
+++ b/changelog/v1.17.0/envoy-1.30.4.yaml
@@ -0,0 +1,10 @@
+changelog:
+- type: DEPENDENCY_BUMP
+  dependencyOwner: solo-io
+  dependencyRepo: envoy-gloo
+  dependencyTag: v1.30.4-patch1
+  issueLink: https://github.com/solo-io/solo-projects/issues/6290
+  resolvesIssue: false
+  description: >-
+    Bump envoy-gloo to bring us onto 1.30.4-patch1.
+    This brings in Datadog updates and route hash policy use after free when using cookies.