diff --git a/webhosting-operator/config/external-dns/patch-deployment.yaml b/webhosting-operator/config/external-dns/patch-deployment.yaml
index 5d2aa40d..359d1fd7 100644
--- a/webhosting-operator/config/external-dns/patch-deployment.yaml
+++ b/webhosting-operator/config/external-dns/patch-deployment.yaml
@@ -18,7 +18,7 @@ spec:
         - --google-zone-visibility=public
         - --policy=sync
         - --registry=txt
-        - --txt-owner-id=shoot--timebertt--sharding-0e61b9e9-b7ce-4a71-a502-89f366015617-ond-460a37
+        - --txt-owner-id=shoot--timebertt--sharding-d657103c-eb4f-4a02-9af3-8ee7dc8d6e12-ond-82dc04
         - --interval=1m
         # ensure the records are not owned by short-lived acme solvers managed by cert-manager or website ingresses
         - --label-filter=acme.cert-manager.io/http01-solver!=true,app!=website
diff --git a/webhosting-operator/shoot.yaml b/webhosting-operator/shoot.yaml
index c9d79fd8..43dfaab2 100644
--- a/webhosting-operator/shoot.yaml
+++ b/webhosting-operator/shoot.yaml
@@ -18,7 +18,7 @@ spec:
       nodeCIDRMaskSize: 20
     kubeProxy:
       mode: IPTables
-    version: "1.25"
+    version: "1.26"
     verticalPodAutoscaler:
       enabled: true
   maintenance: