diff --git a/CHANGELOG.md b/CHANGELOG.md
index a5f37c8..d1b5be8 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,6 +1,6 @@
 # Changelog
 
-## 0.4.0 - Unreleased
+## 0.4.0 - 2026-07-11
 
 - Added request-and-extract login authentication with JSON-path, response-header, and cookie credential sources.
 - Added relative and separate HTTP(S) identity-provider targets, OAuth-style form payloads, redirect control, and custom token schemes.
diff --git a/README.md b/README.md
index 0198749..0a27bed 100644
--- a/README.md
+++ b/README.md
@@ -104,7 +104,7 @@ steps:
   - uses: actions/checkout@v4
 
   # Start your API here, or point base_url at a reachable test environment.
-  - uses: Asttr0/AuthzTrace@v0.3.1
+  - uses: Asttr0/AuthzTrace@v0.4.0
     env:
       ALICE_TOKEN: ${{ secrets.ALICE_TOKEN }}
       BOB_TOKEN: ${{ secrets.BOB_TOKEN }}