diff --git a/CHANGELOG.rst b/CHANGELOG.rst
index 3942bf36f..b71a9b3d5 100644
--- a/CHANGELOG.rst
+++ b/CHANGELOG.rst
@@ -1,9 +1,27 @@
 Release notes
 =============
 
-Version v40.0.2
+Version v40.1.0
 ---------------------
-- Update VulnerableCode documentation for advisories
+- Add support for CWE weakness curation https://github.com/aboutcode-org/vulnerablecode/pull/2380
+- Update VulnerableCode documentation for advisories https://github.com/aboutcode-org/vulnerablecode/pull/2374
+- fix: disable ALTCHA session validation by default https://github.com/aboutcode-org/vulnerablecode/pull/2385
+- Add support for extra mitigation curation https://github.com/aboutcode-org/vulnerablecode/pull/2386
+- Fix Firefox table header overflow and button alignment  https://github.com/aboutcode-org/vulnerablecode/pull/2395
+- fedcode-next: Documentation on how to use the new curation feature https://github.com/aboutcode-org/vulnerablecode/pull/2383
+- Add schema for federated advisory data  https://github.com/aboutcode-org/vulnerablecode/pull/2401
+- fix: include schema doc in toctree https://github.com/aboutcode-org/vulnerablecode/pull/2402
+- test: validate advisory federation against latest schema https://github.com/aboutcode-org/vulnerablecode/pull/2403
+- Move Advisory Curation to "Explanations" section https://github.com/aboutcode-org/vulnerablecode/pull/2404
+- Add support for userAgent in swagger https://github.com/aboutcode-org/vulnerablecode/pull/2377
+- Expose advisory todo count and curating advisories in API response https://github.com/aboutcode-org/vulnerablecode/pull/2406
+- feat: support advisory todo lookup using AVID https://github.com/aboutcode-org/vulnerablecode/pull/2415
+- fix: return 404 for unknown advisory IDs https://github.com/aboutcode-org/vulnerablecode/pull/2397
+- Do not ignore introduced version when considering db specific field https://github.com/aboutcode-org/vulnerablecode/pull/2425
+- chore: bump virtualenv to v21.7.8 https://github.com/aboutcode-org/vulnerablecode/pull/2428
+- Remove duplicate and unused indexes https://github.com/aboutcode-org/vulnerablecode/pull/2432
+- Add workflow to publish VulnerableCode docker image https://github.com/aboutcode-org/vulnerablecode/pull/2436
+- Refresh stale and missing pipeline jobs https://github.com/aboutcode-org/vulnerablecode/pull/2449
 
 
 Version v40.0.1
diff --git a/setup.cfg b/setup.cfg
index 611219c3b..2370b2cc8 100644
--- a/setup.cfg
+++ b/setup.cfg
@@ -1,6 +1,6 @@
 [metadata]
 name = vulnerablecode
-version = 40.0.2
+version = 40.1.0
 license = Apache-2.0 AND CC-BY-SA-4.0
 
 # description must be on ONE line https://github.com/pypa/setuptools/issues/1390
diff --git a/vulnerablecode/__init__.py b/vulnerablecode/__init__.py
index ec241281f..4db6406fb 100644
--- a/vulnerablecode/__init__.py
+++ b/vulnerablecode/__init__.py
@@ -14,7 +14,7 @@
 
 import git
 
-__version__ = "40.0.2"
+__version__ = "40.1.0"
 
 
 PROJECT_DIR = Path(__file__).resolve().parent