diff --git a/.release-please-manifest.json b/.release-please-manifest.json
index beea3f7..1fd56a9 100644
--- a/.release-please-manifest.json
+++ b/.release-please-manifest.json
@@ -1,3 +1,3 @@
 {
-    ".": "0.3.1"
+    ".": "0.4.0"
 }
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 86c13f7..6ec8383 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,5 +1,14 @@
 # Changelog
 
+## [0.4.0](https://github.com/StackOneHQ/defender/compare/defender-v0.3.1...defender-v0.4.0) (2026-03-03)
+
+
+### Features
+
+* add biome configuration file and fix code formatting ([219526f](https://github.com/StackOneHQ/defender/commit/219526f13f2a24ac6034550a50c4f497447b56b6))
+* initial release of @stackone/injection-guard v0.1.0 ([039db9e](https://github.com/StackOneHQ/defender/commit/039db9eecf8a9125e0efbcfd40af45b12f922ec1))
+* v0.2.0 — ONNX-based Tier 2 classifier, API improvements ([bbb204d](https://github.com/StackOneHQ/defender/commit/bbb204d562c5d385149e627baea4f5ae888718cf))
+
 ## [0.3.1](https://github.com/StackOneHQ/connect/compare/defender-v0.3.0...defender-v0.3.1) (2026-02-19)
 
 
diff --git a/package-lock.json b/package-lock.json
index 80eae2d..488a54b 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -1,12 +1,12 @@
 {
     "name": "@stackone/defender",
-    "version": "0.3.1",
+    "version": "0.4.0",
     "lockfileVersion": 3,
     "requires": true,
     "packages": {
         "": {
             "name": "@stackone/defender",
-            "version": "0.3.1",
+            "version": "0.4.0",
             "license": "Apache-2.0",
             "dependencies": {
                 "nanoid": "5.0.9"
diff --git a/package.json b/package.json
index 73e6820..a03b52c 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
     "name": "@stackone/defender",
-    "version": "0.3.1",
+    "version": "0.4.0",
     "description": "Prompt injection defense framework for AI tool-calling",
     "main": "dist/index.cjs",
     "module": "dist/index.mjs",