diff --git a/Changes.rst b/Changes.rst
index fcd50e1..b8aed6e 100644
--- a/Changes.rst
+++ b/Changes.rst
@@ -1,3 +1,26 @@
+Changes for v4.0.0 (2024-08-21)
+===============================
+
+-  Replace PyOpenSSL with Cryptography (#260)
+
+   -  This is a major infrastructure change that replaces core
+      certificate parsing, key processing, signature validation, and
+      certificate chain validation functions previously provided by
+      PyOpenSSL with those provided by Cryptography. Care was taken to
+      preserve the exisitng API, including exception types, but many
+      error messages raised in various error conditions have changed. If
+      you see unexpected behavior and you have reason to believe it is
+      incorrect, please file an issue.
+
+   -  Breaking change: the ca_path parameter, previously used to specify
+      CA certificate stores, is no longer supported. Use the ca_pem_file
+      parameter instead.
+
+-  Raise error when invalid certificate string is passed as input to
+   signer
+
+-  Fix public key matching for ECDSA (#245)
+
 Changes for v3.2.2 (2024-01-28)
 ===============================
 
diff --git a/setup.py b/setup.py
index d8c7d8d..fd00c2a 100755
--- a/setup.py
+++ b/setup.py
@@ -4,7 +4,7 @@
 
 setup(
     name="signxml",
-    version="3.2.2",
+    version="4.0.0",
     url="https://github.com/kislyuk/signxml",
     license="Apache Software License",
     author="Andrey Kislyuk",