diff --git a/CHANGELOG.md b/CHANGELOG.md
index bf0549e..2176818 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -5,11 +5,15 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
-## [Unreleased]
+## [4.0.3] - 2026-10-04
 
 ### Security
 
-- **Dev dependency updates** — Upgraded `vitest` to `^4.1.11`, which pulls in patched `@vitest/mocker`, `vite`, `postcss`, `nanoid`, and `picomatch` and drops `rollup`. Resolves all open Dependabot alerts. Dev-only; the published package is unchanged.
+- **Dev dependency updates** — Upgraded `vitest` to `^4.1.11`, which pulls in patched `@vitest/mocker`, `vite`, `postcss`, `nanoid`, and `picomatch` and drops `rollup`. Resolves all open Dependabot alerts. Dev-only; runtime dependencies are unchanged.
+
+### Added
+
+- **`SECURITY.md`** — Vulnerabilities are reported publicly through GitHub issues so anyone can review and help fix them. Covers what to include, redacting real tokens, and how fixes are released and credited.
 
 ### Changed
 
diff --git a/package-lock.json b/package-lock.json
index a738f39..9f68653 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -1,12 +1,12 @@
 {
   "name": "@takescake/1password-mcp",
-  "version": "4.0.2",
+  "version": "4.0.3",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@takescake/1password-mcp",
-      "version": "4.0.2",
+      "version": "4.0.3",
       "license": "Apache-2.0",
       "dependencies": {
         "@1password/sdk": "^0.3.1",
diff --git a/package.json b/package.json
index ebf99d8..71dd906 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@takescake/1password-mcp",
-  "version": "4.0.2",
+  "version": "4.0.3",
   "private": false,
   "type": "module",
   "description": "Security-first MCP server for 1Password — vault/item tools, prompts, resources, and op_run secret injection (MCP 2026-07-28)",
diff --git a/server.json b/server.json
index 66edd4a..227d9ad 100644
--- a/server.json
+++ b/server.json
@@ -6,12 +6,12 @@
     "url": "https://github.com/CakeRepository/1Password-MCP.git",
     "source": "github"
   },
-  "version": "4.0.2",
+  "version": "4.0.3",
   "packages": [
     {
       "registryType": "npm",
       "identifier": "@takescake/1password-mcp",
-      "version": "4.0.2",
+      "version": "4.0.3",
       "transport": {
         "type": "stdio"
       },
diff --git a/src/config.ts b/src/config.ts
index b18f5a7..b44df0f 100644
--- a/src/config.ts
+++ b/src/config.ts
@@ -6,7 +6,7 @@ import { execFileSync } from "node:child_process";
 import { LOG_LEVEL_VALUES, type LogLevel } from "./types.js";
 
 export const SERVER_NAME = "1password-mcp";
-export const SERVER_VERSION = "4.0.2";
+export const SERVER_VERSION = "4.0.3";
 
 /** Parse a `--flag value` or `--flag=value` argument from process.argv. */
 function getArgValue(name: string): string | undefined {