diff --git a/CHANGELOG.md b/CHANGELOG.md
index 9fde650..9e2f2a7 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -4,10 +4,10 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](http://keepachangelog.com/en/1.0.0/)
 and this project adheres to [Semantic Versioning](http://semver.org/spec/v2.0.0.html).
 
-## [Unreleased]
-This major release adds new functionality that may be used in a
-backwards-incompatible way. However, this release aims to be compatible
-with all existing configurations.
+## [4.0.0] - 2022-12-16
+This major release aims to be compatible with all existing
+configurations. However, a lot was changed unter the hood so
+be careful when deploying this release.
 
 ### Added
 * Allow the same certificate on multiple nodes ([#40])
@@ -153,7 +153,8 @@ This new major release is an effort to modernize the module. It fixes some long-
 ## [1.0.0] - 2917-04-16
 Initial release (fork of bzed-letsencrypt).
 
-[Unreleased]: https://github.com/fraenki/puppet-acme/compare/3.0.0...HEAD
+[Unreleased]: https://github.com/fraenki/puppet-acme/compare/4.0.0...HEAD
+[4.0.0]: https://github.com/fraenki/puppet-acme/compare/3.0.0...4.0.0
 [3.0.0]: https://github.com/fraenki/puppet-acme/compare/2.3.0...3.0.0
 [2.3.0]: https://github.com/fraenki/puppet-acme/compare/2.2.0...2.3.0
 [2.2.0]: https://github.com/fraenki/puppet-acme/compare/2.1.0...2.2.0
diff --git a/metadata.json b/metadata.json
index e31b64d..ded7dbf 100644
--- a/metadata.json
+++ b/metadata.json
@@ -1,6 +1,6 @@
 {
   "name": "fraenki-acme",
-  "version": "3.0.0",
+  "version": "4.0.0",
   "author": "Frank Wall",
   "summary": "Centralized SSL certificate management using Let's Encrypt and the lightweight acme.sh",
   "license": "Apache-2.0",