diff --git a/jwcrypto-0.3.1.tar.gz b/jwcrypto-0.3.1.tar.gz
deleted file mode 100644
index 64c8f29..0000000
--- a/jwcrypto-0.3.1.tar.gz
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:636e9961bd7e1ffa7b97638bfd6f6de3988b702d9257827852c40092443b72c6
-size 60565
diff --git a/jwcrypto-0.4.0.tar.gz b/jwcrypto-0.4.0.tar.gz
new file mode 100644
index 0000000..f23135e
--- /dev/null
+++ b/jwcrypto-0.4.0.tar.gz
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:157be93f8f7832bcafc2f7444d5945edabdaaa1297e655d1ef65e869fb716b19
+size 66257
diff --git a/python-jwcrypto.changes b/python-jwcrypto.changes
index 9848a26..928e227 100644
--- a/python-jwcrypto.changes
+++ b/python-jwcrypto.changes
@@ -1,3 +1,8 @@
+-------------------------------------------------------------------
+Sat Dec  3 15:34:39 UTC 2016 - michael@stroeder.com
+
+- update to upstream release 0.4.0
+
 -------------------------------------------------------------------
 Fri Nov 11 17:51:23 UTC 2016 - michael@stroeder.com
 
diff --git a/python-jwcrypto.spec b/python-jwcrypto.spec
index 0f19e73..a2e5590 100644
--- a/python-jwcrypto.spec
+++ b/python-jwcrypto.spec
@@ -17,7 +17,7 @@
 
 
 Name:           python-jwcrypto
-Version:        0.3.1
+Version:        0.4.0
 Release:        0
 Summary:        Python module package implementing JOSE Web standards
 License:        LGPL-3.0