From 830511e2c26ab8874c0f178f7915e6a6989c7c2b Mon Sep 17 00:00:00 2001
From: "meigma-release-please[bot]"
 <275217079+meigma-release-please[bot]@users.noreply.github.com>
Date: Thu, 28 May 2026 00:12:37 +0000
Subject: [PATCH] chore(master): release 0.4.0

---
 .release-please-manifest.json |  2 +-
 CHANGELOG.md                  | 24 ++++++++++++++++++++++++
 2 files changed, 25 insertions(+), 1 deletion(-)

diff --git a/.release-please-manifest.json b/.release-please-manifest.json
index 0ee8c01..2537c1f 100644
--- a/.release-please-manifest.json
+++ b/.release-please-manifest.json
@@ -1,3 +1,3 @@
 {
-  ".": "0.3.0"
+  ".": "0.4.0"
 }
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 0d066b4..a327690 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,5 +1,29 @@
 # Changelog
 
+## [0.4.0](https://github.com/meigma/authkit/compare/v0.3.0...v0.4.0) (2026-05-28)
+
+
+### ⚠ BREAKING CHANGES
+
+* **oidc:** migrate OIDC to explicit exchange ([#47](https://github.com/meigma/authkit/issues/47))
+
+### Features
+
+* **authkit:** add JWT-first access token flow ([#45](https://github.com/meigma/authkit/issues/45)) ([8e15d75](https://github.com/meigma/authkit/commit/8e15d755324dffb39f36ab33d882e992864774f7))
+* **oidc:** migrate OIDC to explicit exchange ([#47](https://github.com/meigma/authkit/issues/47)) ([86487bf](https://github.com/meigma/authkit/commit/86487bfebd1bccd97d662c614d9adf49b87a5f92))
+* **onboarding:** add identity onboarding foundation ([#41](https://github.com/meigma/authkit/issues/41)) ([6ce2e73](https://github.com/meigma/authkit/commit/6ce2e73490687716837c328c875d31a66dbadf51))
+* **passkey:** add storage adapters ([#53](https://github.com/meigma/authkit/issues/53)) ([be4958c](https://github.com/meigma/authkit/commit/be4958ca353404c177cef9027c7521b0a2213306))
+* **passkey:** add WebAuthn passkey ceremony package ([#51](https://github.com/meigma/authkit/issues/51)) ([217f0d4](https://github.com/meigma/authkit/commit/217f0d4e6d9c0cf71e6180c55b4317793c86f702))
+* **testkit:** add API-token login flow ([#46](https://github.com/meigma/authkit/issues/46)) ([940506c](https://github.com/meigma/authkit/commit/940506c69a83e653bc4a9d20f8f656fc6f62b5a3))
+* **testkit:** add passkey browser flow ([#54](https://github.com/meigma/authkit/issues/54)) ([92fa195](https://github.com/meigma/authkit/commit/92fa19560cac936e8137c20e22e625eaf949a950))
+* **testkit:** add paste ownership authorization ([#48](https://github.com/meigma/authkit/issues/48)) ([2f6ee1c](https://github.com/meigma/authkit/commit/2f6ee1cf94e559eeeaa14c68e497258a3abf2f83))
+* **testkit:** configure OIDC provider from env ([#49](https://github.com/meigma/authkit/issues/49)) ([9ea7a9e](https://github.com/meigma/authkit/commit/9ea7a9edc8f97515f78fc79d0def24a93f4d5a5c))
+
+
+### Bug Fixes
+
+* **store/memory:** deduplicate AssignRoleIDs to match postgres ([#59](https://github.com/meigma/authkit/issues/59)) ([c15f247](https://github.com/meigma/authkit/commit/c15f247a85dd86aabe1846a43da0aae07edfa0ac))
+
 ## [0.3.0](https://github.com/meigma/authkit/compare/v0.2.0...v0.3.0) (2026-05-11)