diff --git a/.SRCINFO b/.SRCINFO
index b9e43901cf15..26e395d896d0 100644
--- a/.SRCINFO
+++ b/.SRCINFO
@@ -1,6 +1,6 @@
 pkgbase = pmg-bin
 	pkgdesc = PMG protects developers from getting hacked by malicious open source packages
-	pkgver = 0.3.8
+	pkgver = 0.4.0
 	pkgrel = 1
 	url = https://github.com/safedep/pmg
 	arch = x86_64
@@ -9,11 +9,11 @@ pkgbase = pmg-bin
 	license = Apache-2.0
 	provides = pmg
 	conflicts = pmg
-	source_x86_64 = pmg-x86_64-0.3.8.tgz::https://github.com/safedep/pmg/releases/download/v0.3.8/pmg_Linux_x86_64.tar.gz
-	sha256sums_x86_64 = fb28eba3a7264553f46dfc2c8625c10a0d02c8cd956747deb16273f1aaca6097
-	source_i686 = pmg-i686-0.3.8.tgz::https://github.com/safedep/pmg/releases/download/v0.3.8/pmg_Linux_i386.tar.gz
-	sha256sums_i686 = 7979a18566623ce25fd34bf209c0931baa22c5fc2050bd2bab08b358c99789f5
-	source_aarch64 = pmg-aarch64-0.3.8.tgz::https://github.com/safedep/pmg/releases/download/v0.3.8/pmg_Linux_arm64.tar.gz
-	sha256sums_aarch64 = eb9ddad8b6eb9575a9b37ef3a3483513ed903760be6c89c426b86652f03284fd
+	source_x86_64 = pmg-x86_64-0.4.0.tgz::https://github.com/safedep/pmg/releases/download/v0.4.0/pmg_Linux_x86_64.tar.gz
+	sha256sums_x86_64 = 0cc622653ae612be18566c4fd04d17bdb919cb16228a6a58221df56d03343824
+	source_i686 = pmg-i686-0.4.0.tgz::https://github.com/safedep/pmg/releases/download/v0.4.0/pmg_Linux_i386.tar.gz
+	sha256sums_i686 = 9d15acffd0963fe1fb67d186bb3a34559bbf6ff9e300763706caabd228770b24
+	source_aarch64 = pmg-aarch64-0.4.0.tgz::https://github.com/safedep/pmg/releases/download/v0.4.0/pmg_Linux_arm64.tar.gz
+	sha256sums_aarch64 = 77e6570c1f8befacb382a35dbfc0c1707d80db8f1999ff230d468b60b0fb9673
 
 pkgname = pmg-bin
diff --git a/PKGBUILD b/PKGBUILD
index 475d49deddc0..8bd720528630 100644
--- a/PKGBUILD
+++ b/PKGBUILD
@@ -6,7 +6,7 @@ _appname=${_pkgname}
 pkgname=${_pkgname}-bin
 pkgdesc="PMG protects developers from getting hacked by malicious open source packages"
 
-pkgver=0.3.8
+pkgver=0.4.0
 pkgrel=1
 _pkgvername=v${pkgver}
 
@@ -24,9 +24,9 @@ conflicts=("${_pkgname}")
 source_x86_64=("${_pkgname}-${arch[0]}-${pkgver}.tgz::${url}/releases/download/${_pkgvername}/${_pkgname}_${_barch[0]}.tar.gz")
 source_i686=("${_pkgname}-${arch[1]}-${pkgver}.tgz::${url}/releases/download/${_pkgvername}/${_pkgname}_${_barch[1]}.tar.gz")
 source_aarch64=("${_pkgname}-${arch[2]}-${pkgver}.tgz::${url}/releases/download/${_pkgvername}/${_pkgname}_${_barch[2]}.tar.gz")
-sha256sums_x86_64=('fb28eba3a7264553f46dfc2c8625c10a0d02c8cd956747deb16273f1aaca6097')
-sha256sums_i686=('7979a18566623ce25fd34bf209c0931baa22c5fc2050bd2bab08b358c99789f5')
-sha256sums_aarch64=('eb9ddad8b6eb9575a9b37ef3a3483513ed903760be6c89c426b86652f03284fd')
+sha256sums_x86_64=('0cc622653ae612be18566c4fd04d17bdb919cb16228a6a58221df56d03343824')
+sha256sums_i686=('9d15acffd0963fe1fb67d186bb3a34559bbf6ff9e300763706caabd228770b24')
+sha256sums_aarch64=('77e6570c1f8befacb382a35dbfc0c1707d80db8f1999ff230d468b60b0fb9673')
 
 
 case ${CARCH} in