diff --git a/CHANGELOG.md b/CHANGELOG.md
new file mode 100644
index 0000000..23e2f51
--- /dev/null
+++ b/CHANGELOG.md
@@ -0,0 +1,5 @@
+## [4.0.0](https://github.com/auth0/node-xml-encryption/compare/v3.1.0...v4.0.0) (2026-03-31)
+
+### ⚠ BREAKING CHANGES
+
+- Moving CBC algorithms to insecure. ([#123](https://github.com/auth0/node-xml-encryption/pull/123)) ([b03887a](https://github.com/auth0/node-xml-encryption/commit/b03887afab7313ad9d8513012fd943f0da2780fb))
diff --git a/package-lock.json b/package-lock.json
index 4a601f3..fa03f0f 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -1,12 +1,12 @@
 {
   "name": "xml-encryption",
-  "version": "3.1.0",
+  "version": "4.0.0",
   "lockfileVersion": 2,
   "requires": true,
   "packages": {
     "": {
       "name": "xml-encryption",
-      "version": "3.1.0",
+      "version": "4.0.0",
       "license": "MIT",
       "dependencies": {
         "@xmldom/xmldom": "^0.8.5",
diff --git a/package.json b/package.json
index 45b573f..2a19625 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "xml-encryption",
-  "version": "3.1.0",
+  "version": "4.0.0",
   "devDependencies": {
     "@commitlint/cli": "^20.3.1",
     "@commitlint/config-conventional": "^20.3.1",