From e1810e2feb7f0bb0901c3a6134dff0b826c8dd0b Mon Sep 17 00:00:00 2001
From: "github-actions[bot]"
 <41898282+github-actions[bot]@users.noreply.github.com>
Date: Sun, 1 Nov 2026 02:48:31 +0000
Subject: [PATCH] chore: release v0.4.0

---
 .release-please-manifest.json |  2 +-
 CHANGELOG.md                  | 20 ++++++++++++++++++++
 pyproject.toml                |  2 +-
 uv.lock                       |  2 +-
 4 files changed, 23 insertions(+), 3 deletions(-)

diff --git a/.release-please-manifest.json b/.release-please-manifest.json
index 1c861e1..8efb275 100644
--- a/.release-please-manifest.json
+++ b/.release-please-manifest.json
@@ -1 +1 @@
-{".":"0.3.0"}
+{".":"0.4.0"}
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 63b5554..5ff8caa 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,5 +1,25 @@
 # Changelog
 
+## [0.4.0](https://github.com/fells-code/seamless-auth-python/compare/v0.3.0...v0.4.0) (2026-11-01)
+
+
+### Added
+
+* verify-only resource server mode with audience, scope, role and step-up guards ([f5b58bf](https://github.com/fells-code/seamless-auth-python/commit/f5b58bfc6eeee24af3161505e6800a6d70349605))
+* verify-only resource server mode with audience, scope, role and step-up guards ([8187925](https://github.com/fells-code/seamless-auth-python/commit/8187925c5d9afb294c242860a8f2d06c2203e22b))
+
+
+### Fixed
+
+* Origin allowlist with Sec-Fetch-Site, and verify the cookie's inner access token ([2e52141](https://github.com/fells-code/seamless-auth-python/commit/2e521414a22c6ea8f3e4463d384a0a45cb2517f9))
+* Origin allowlist with Sec-Fetch-Site, and verify the cookie's inner access token ([46af635](https://github.com/fells-code/seamless-auth-python/commit/46af63556f4665f46395ff212dde2c665f11cee6)), closes [#15](https://github.com/fells-code/seamless-auth-python/issues/15)
+
+
+### Documentation
+
+* show unsubscribe headers from your own sender and the invite's signInUrl ([1d5087f](https://github.com/fells-code/seamless-auth-python/commit/1d5087fb51f0c00959178c4216c4ef4d59d05708))
+* show unsubscribe headers from your own sender and the invite's signInUrl ([1aa4db4](https://github.com/fells-code/seamless-auth-python/commit/1aa4db447690831079fa943c30d9b8aaf925f0f0))
+
 ## [0.3.0](https://github.com/fells-code/seamless-auth-python/compare/v0.2.2...v0.3.0) (2026-10-25)
 
 
diff --git a/pyproject.toml b/pyproject.toml
index 4739ad5..20b1ab8 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "seamless-auth"
-version = "0.3.0"
+version = "0.4.0"
 description = "Seamless Auth server adapter for FastAPI and Django: cookie and bearer sessions in front of the Seamless Auth API"
 readme = "README.md"
 license = "Apache-2.0"
diff --git a/uv.lock b/uv.lock
index b9eac87..dce6295 100644
--- a/uv.lock
+++ b/uv.lock
@@ -891,7 +891,7 @@ wheels = [
 
 [[package]]
 name = "seamless-auth"
-version = "0.3.0"
+version = "0.4.0"
 source = { editable = "." }
 dependencies = [
     { name = "httpx2" },