diff --git a/CHANGELOG.md b/CHANGELOG.md
index 1bf4ee43..f9c81fbd 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -2,6 +2,13 @@
 
 All notable changes to this project will be documented in this file. See [standard-version](https://github.com/conventional-changelog/standard-version) for commit guidelines.
 
+## [4.0.0](https://github.com/linode/apl-tasks/compare/v3.18.0...v4.0.0) (2026-06-03)
+
+
+### Features
+
+* platform secrets as sealed secrets ([#310](https://github.com/linode/apl-tasks/issues/310)) ([e8e600e](https://github.com/linode/apl-tasks/commit/e8e600eef2ef767a7203026b8f58f94ec97fa3b4))
+
 ## [3.18.0](https://github.com/linode/apl-tasks/compare/v3.17.0...v3.18.0) (2026-03-20)
 
 
diff --git a/package-lock.json b/package-lock.json
index 91b61f8d..9344b847 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -1,12 +1,12 @@
 {
   "name": "otomi-tasks",
-  "version": "3.18.0",
+  "version": "4.0.0",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "otomi-tasks",
-      "version": "3.18.0",
+      "version": "4.0.0",
       "license": "Apache-2.0",
       "dependencies": {
         "@kubernetes/client-node": "1.4.0",
diff --git a/package.json b/package.json
index 8ff4b54d..062e5dc7 100644
--- a/package.json
+++ b/package.json
@@ -125,5 +125,5 @@
       "tag": true
     }
   },
-  "version": "3.18.0"
+  "version": "4.0.0"
 }