diff --git a/CHANGELOG.md b/CHANGELOG.md
index dac7457..4256077 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,6 +3,12 @@
 All notable changes to this project are documented here. This project adheres to
 [Semantic Versioning](https://semver.org/).
 
+## [4.0.2] - 2026-06-17
+
+### Docs
+- SECURITY.md: updated the supported-versions table to 4.x and fixed the
+  cross-reference to the security model (now `IMPLEMENTATION.md §9`). No code changes.
+
 ## [4.0.1] - 2026-06-17
 
 ### Docs
diff --git a/package.json b/package.json
index faf51e8..dfaa9c7 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@michaeljfalk/liveselect",
-  "version": "4.0.1",
+  "version": "4.0.2",
   "publishConfig": {
     "access": "public"
   },