diff --git a/CHANGELOG.rst b/CHANGELOG.rst
index 48be79c22..7d0a62c01 100644
--- a/CHANGELOG.rst
+++ b/CHANGELOG.rst
@@ -1,6 +1,13 @@
 Release notes
 =============
 
+Version v40.0.0
+---------------------
+
+- Fix malformed CVSS severity scores.
+- Disable v1 API, UI & pipelines.
+
+
 Version v39.0.0
 ---------------------
 
diff --git a/setup.cfg b/setup.cfg
index 6e6523327..83a4bcbae 100644
--- a/setup.cfg
+++ b/setup.cfg
@@ -1,6 +1,6 @@
 [metadata]
 name = vulnerablecode
-version = 39.0.0
+version = 40.0.0
 license = Apache-2.0 AND CC-BY-SA-4.0
 
 # description must be on ONE line https://github.com/pypa/setuptools/issues/1390
diff --git a/vulnerablecode/__init__.py b/vulnerablecode/__init__.py
index 8d42393dc..fa20a9631 100644
--- a/vulnerablecode/__init__.py
+++ b/vulnerablecode/__init__.py
@@ -14,7 +14,7 @@
 
 import git
 
-__version__ = "39.0.0"
+__version__ = "40.0.0"
 
 
 PROJECT_DIR = Path(__file__).resolve().parent