diff --git a/deja-dup-38.4.tar.bz2 b/deja-dup-38.4.tar.bz2
deleted file mode 100644
index a5650cd..0000000
--- a/deja-dup-38.4.tar.bz2
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:f06d7f0a4eeb9ba939554dd877c0d1c6a3dbb47cfb7114efc1b46688fc2ee513
-size 711900
diff --git a/deja-dup-40.1.tar.bz2 b/deja-dup-40.1.tar.bz2
new file mode 100644
index 0000000..e0c8f92
--- /dev/null
+++ b/deja-dup-40.1.tar.bz2
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:6fc439ba7c28200dabc557ec726c324bb849919c54b65fbc5e01f3f1b90029bb
+size 716851
diff --git a/deja-dup.changes b/deja-dup.changes
index ead1dee..c7eaf72 100644
--- a/deja-dup.changes
+++ b/deja-dup.changes
@@ -1,3 +1,50 @@
+-------------------------------------------------------------------
+Fri Jul  5 09:48:53 UTC 2019 - Bjørn Lie <bjorn.lie@gmail.com>
+
+- Update to version 40.1:
+  + Fix versioning to be correct.
+- Changes from version 40.0:
+  + Fix tests when run under glib 2.60
+  + Updated translations.
+- Changes from version 39.1:
+  + Fix a bug that could have caused backups to be encrypted with
+    two different passwords in some cases. This would result in
+    difficulty backing up or restoring by not accepting the
+    password you expected it to.
+  + Fix a bug that caused duplicate save or exclude folders to
+    appear in the preferences.
+  + Delete a canary file that duplicity's pydrive puts in your
+    Drive.
+  + If you don't ask for your password to be saved, we now clear
+    out any older saved password.
+  + Finally delete the ancient Ubuntu One backend code.
+- Changes from version 39.0:
+  + Switch away from GNOME Online Accounts to our own cloud keys:
+    - It was brought to our attention that we shouldn't be using
+      GNOME's keys, as they are intended for GNOME only.
+    - Google accounts will have to be re-authenticated with our
+      keys.
+    - Nextcloud accounts will now appear as webdav network server
+      accounts.
+    - Adds new pydrive_pkgs option to list the package names needed
+      for the pydrive duplicity backend (for now, the system
+      package that provides the pydrive python2 package should
+      suffice).
+    - Adds new google_client_id option if you want to override our
+      default account key and use your own. You likely won't want
+      to do this.
+    - Adds new dependencies on libjson-glib and libsoup.
+    - Drops libgoa-backend dependency. The libgoa dependency will
+      stay during a transition period from the old keys to the new
+      keys.
+  + Unmount a remote backup location when we are done with it, if
+    we originally mounted it.
+- Add pkgconfig(json-glib-1.0) and pkgconfig(libsoup-2.4)
+  BuildRequires: New dependencies.
+- Drop pkgconfig(goa-backend-1.0) BuildRequires: No longer needed,
+  nor used.
+- Reenable meson_tests, upstream fixed the issues.
+
 -------------------------------------------------------------------
 Tue Feb 26 16:17:54 UTC 2019 - bjorn.lie@gmail.com
 
diff --git a/deja-dup.spec b/deja-dup.spec
index bbab7dd..910ec11 100644
--- a/deja-dup.spec
+++ b/deja-dup.spec
@@ -17,8 +17,7 @@
 
 
 Name:           deja-dup
-### FIXME ### Reenable meson_test on next version bump
-Version:        38.4
+Version:        40.1
 Release:        0
 Summary:        Simple backup tool and frontend for duplicity
 License:        GPL-3.0-or-later
@@ -41,11 +40,12 @@ BuildRequires:  pkgconfig(gio-2.0) >= 2.46
 BuildRequires:  pkgconfig(gio-unix-2.0)
 BuildRequires:  pkgconfig(glib-2.0) >= 2.56.1
 BuildRequires:  pkgconfig(goa-1.0) >= 3.8.0
-BuildRequires:  pkgconfig(goa-backend-1.0)
 BuildRequires:  pkgconfig(gtk+-3.0) >= 3.22
+BuildRequires:  pkgconfig(json-glib-1.0)
 BuildRequires:  pkgconfig(libnautilus-extension)
 BuildRequires:  pkgconfig(libnotify) >= 0.7
 BuildRequires:  pkgconfig(libsecret-1)
+BuildRequires:  pkgconfig(libsoup-2.4)
 BuildRequires:  pkgconfig(packagekit-glib2) >= 0.6.5
 Recommends:     %{name}-lang
 Recommends:     duplicity >= 0.6.25
@@ -99,11 +99,11 @@ This package contains a plugin to integrate Déjà Dup into Nautilus.
 %fdupes %{buildroot}%{_datadir}
 
 %check
-#%%meson_test
+%meson_test
 
 %files
-%license COPYING
-%doc AUTHORS HACKING NEWS.md README.md
+%license COPYING.md
+%doc AUTHORS HACKING.md NEWS.md README.md
 %doc %{_datadir}/help/C/deja-dup/
 %{_bindir}/deja-dup
 %{_mandir}/man1/deja-dup.1%{?ext_man}