From b4e0d21c0b6ed37b934983eb22b054d982e43712 Mon Sep 17 00:00:00 2001
From: Michael Falk <michael@co-pilot.ca>
Date: Wed, 17 Jun 2026 12:48:39 -0700
Subject: [PATCH] =?UTF-8?q?release:=20v4.0.2=20=E2=80=94=20ship=20SECURITY?=
 =?UTF-8?q?.md=20refresh=20to=20npm=20(no=20code=20changes)?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Bumps version to 4.0.2 so the SECURITY.md fixes (supported versions 4.x;
IMPLEMENTATION.md §9 cross-ref) reach the npm package. No library changes.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
---
 CHANGELOG.md | 6 ++++++
 package.json | 2 +-
 2 files changed, 7 insertions(+), 1 deletion(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index dac7457..4256077 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,6 +3,12 @@
 All notable changes to this project are documented here. This project adheres to
 [Semantic Versioning](https://semver.org/).
 
+## [4.0.2] - 2026-06-17
+
+### Docs
+- SECURITY.md: updated the supported-versions table to 4.x and fixed the
+  cross-reference to the security model (now `IMPLEMENTATION.md §9`). No code changes.
+
 ## [4.0.1] - 2026-06-17
 
 ### Docs
diff --git a/package.json b/package.json
index faf51e8..dfaa9c7 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@michaeljfalk/liveselect",
-  "version": "4.0.1",
+  "version": "4.0.2",
   "publishConfig": {
     "access": "public"
   },