diff --git a/CHANGES.rst b/CHANGES.rst
index c966744..4a6a805 100644
--- a/CHANGES.rst
+++ b/CHANGES.rst
@@ -1,6 +1,33 @@
 ChangeLog
 =========
 
+Release 0.4.0
+-------------
+
+Fixes:
+
+* fix api return value (no "noauth", just "badauth")
+* fix invalid /detectip/None URL for fresh session
+* make IP detection on the web UI a bit more reliable
+* fix KeyErrors in logging (at least for default format)
+
+
+New Features:
+
+* use REMOTE_ADDR for one of the 2 IP detections
+* add a warning on the UI if the user has no javascript enabled
+* use real session cookies by default (that get cleared on browser close)
+* support "keep me logged in" if user wants a permanent 14d cookie
+* use html5 autofocus to put cursor into the right input field
+* python manage.py testuser to reinitialize test user (see docs)
+
+
+Other changes:
+
+* document clearsessions usage
+* more tests
+
+
 Release 0.3.0
 -------------
 
diff --git a/nsupdate/__init__.py b/nsupdate/__init__.py
index 50217bb..e72625f 100644
--- a/nsupdate/__init__.py
+++ b/nsupdate/__init__.py
@@ -62,4 +62,4 @@ class Version(tuple):
         return version_str
 
 
-version = Version(0, 3, 0)
+version = Version(0, 4, 0)