diff --git a/Cargo.lock b/Cargo.lock
index 0fb5228..f7411ca 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -1560,7 +1560,7 @@ dependencies = [
 
 [[package]]
 name = "sigstore-bundle"
-version = "0.3.0"
+version = "0.4.0"
 dependencies = [
  "base64",
  "hex",
@@ -1576,7 +1576,7 @@ dependencies = [
 
 [[package]]
 name = "sigstore-cache"
-version = "0.3.0"
+version = "0.4.0"
 dependencies = [
  "chrono",
  "directories",
@@ -1588,7 +1588,7 @@ dependencies = [
 
 [[package]]
 name = "sigstore-conformance"
-version = "0.3.0"
+version = "0.4.0"
 dependencies = [
  "base64",
  "hex",
@@ -1609,7 +1609,7 @@ dependencies = [
 
 [[package]]
 name = "sigstore-crypto"
-version = "0.3.0"
+version = "0.4.0"
 dependencies = [
  "aws-lc-rs",
  "base64",
@@ -1630,7 +1630,7 @@ dependencies = [
 
 [[package]]
 name = "sigstore-fulcio"
-version = "0.3.0"
+version = "0.4.0"
 dependencies = [
  "base64",
  "hex",
@@ -1648,7 +1648,7 @@ dependencies = [
 
 [[package]]
 name = "sigstore-merkle"
-version = "0.3.0"
+version = "0.4.0"
 dependencies = [
  "base64",
  "hex",
@@ -1662,7 +1662,7 @@ dependencies = [
 
 [[package]]
 name = "sigstore-oidc"
-version = "0.3.0"
+version = "0.4.0"
 dependencies = [
  "base64",
  "rand",
@@ -1678,7 +1678,7 @@ dependencies = [
 
 [[package]]
 name = "sigstore-rekor"
-version = "0.3.0"
+version = "0.4.0"
 dependencies = [
  "base64",
  "hex",
@@ -1696,7 +1696,7 @@ dependencies = [
 
 [[package]]
 name = "sigstore-sign"
-version = "0.3.0"
+version = "0.4.0"
 dependencies = [
  "base64",
  "chrono",
@@ -1717,7 +1717,7 @@ dependencies = [
 
 [[package]]
 name = "sigstore-trust-root"
-version = "0.3.0"
+version = "0.4.0"
 dependencies = [
  "base64",
  "chrono",
@@ -1739,7 +1739,7 @@ dependencies = [
 
 [[package]]
 name = "sigstore-tsa"
-version = "0.3.0"
+version = "0.4.0"
 dependencies = [
  "aws-lc-rs",
  "base64",
@@ -1765,7 +1765,7 @@ dependencies = [
 
 [[package]]
 name = "sigstore-types"
-version = "0.3.0"
+version = "0.4.0"
 dependencies = [
  "base64",
  "chrono",
@@ -1778,7 +1778,7 @@ dependencies = [
 
 [[package]]
 name = "sigstore-verify"
-version = "0.3.0"
+version = "0.4.0"
 dependencies = [
  "base64",
  "chrono",
diff --git a/Cargo.toml b/Cargo.toml
index 2e530b4..8fe1aeb 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -17,7 +17,7 @@ members = [
 ]
 
 [workspace.package]
-version = "0.3.0"
+version = "0.4.0"
 edition = "2021"
 license = "BSD-3-Clause"
 repository = "https://github.com/sigstore/sigultimate"
@@ -86,15 +86,15 @@ futures = "0.3"
 directories = "6.0"
 
 # Internal crates (path + version for publishing)
-sigstore-types = { path = "crates/sigstore-types", version = "0.3.0" }
-sigstore-crypto = { path = "crates/sigstore-crypto", version = "0.3.0" }
-sigstore-merkle = { path = "crates/sigstore-merkle", version = "0.3.0" }
-sigstore-tsa = { path = "crates/sigstore-tsa", version = "0.3.0" }
-sigstore-trust-root = { path = "crates/sigstore-trust-root", version = "0.3.0" }
-sigstore-bundle = { path = "crates/sigstore-bundle", version = "0.3.0" }
-sigstore-rekor = { path = "crates/sigstore-rekor", version = "0.3.0" }
-sigstore-fulcio = { path = "crates/sigstore-fulcio", version = "0.3.0" }
-sigstore-oidc = { path = "crates/sigstore-oidc", version = "0.3.0" }
-sigstore-cache = { path = "crates/sigstore-cache", version = "0.3.0" }
-sigstore-verify = { path = "crates/sigstore-verify", version = "0.3.0" }
-sigstore-sign = { path = "crates/sigstore-sign", version = "0.3.0" }
+sigstore-types = { path = "crates/sigstore-types", version = "0.4.0" }
+sigstore-crypto = { path = "crates/sigstore-crypto", version = "0.4.0" }
+sigstore-merkle = { path = "crates/sigstore-merkle", version = "0.4.0" }
+sigstore-tsa = { path = "crates/sigstore-tsa", version = "0.4.0" }
+sigstore-trust-root = { path = "crates/sigstore-trust-root", version = "0.4.0" }
+sigstore-bundle = { path = "crates/sigstore-bundle", version = "0.4.0" }
+sigstore-rekor = { path = "crates/sigstore-rekor", version = "0.4.0" }
+sigstore-fulcio = { path = "crates/sigstore-fulcio", version = "0.4.0" }
+sigstore-oidc = { path = "crates/sigstore-oidc", version = "0.4.0" }
+sigstore-cache = { path = "crates/sigstore-cache", version = "0.4.0" }
+sigstore-verify = { path = "crates/sigstore-verify", version = "0.4.0" }
+sigstore-sign = { path = "crates/sigstore-sign", version = "0.4.0" }
diff --git a/crates/sigstore-crypto/CHANGELOG.md b/crates/sigstore-crypto/CHANGELOG.md
index 5a2954b..1242af3 100644
--- a/crates/sigstore-crypto/CHANGELOG.md
+++ b/crates/sigstore-crypto/CHANGELOG.md
@@ -7,6 +7,12 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [0.4.0](https://github.com/wolfv/sigstore-rust/compare/sigstore-crypto-v0.3.0...sigstore-crypto-v0.4.0) - 2025-11-28
+
+### Other
+
+- introduce new artifact api
+
 ## [0.3.0](https://github.com/wolfv/sigstore-rust/compare/sigstore-crypto-v0.2.0...sigstore-crypto-v0.3.0) - 2025-11-28
 
 ### Other
diff --git a/crates/sigstore-sign/CHANGELOG.md b/crates/sigstore-sign/CHANGELOG.md
index da5955f..07bd453 100644
--- a/crates/sigstore-sign/CHANGELOG.md
+++ b/crates/sigstore-sign/CHANGELOG.md
@@ -7,6 +7,12 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [0.4.0](https://github.com/wolfv/sigstore-rust/compare/sigstore-sign-v0.3.0...sigstore-sign-v0.4.0) - 2025-11-28
+
+### Other
+
+- introduce new artifact api
+
 ## [0.3.0](https://github.com/wolfv/sigstore-rust/compare/sigstore-sign-v0.2.0...sigstore-sign-v0.3.0) - 2025-11-28
 
 ### Other
diff --git a/crates/sigstore-types/CHANGELOG.md b/crates/sigstore-types/CHANGELOG.md
index 48c6ba8..c0452bb 100644
--- a/crates/sigstore-types/CHANGELOG.md
+++ b/crates/sigstore-types/CHANGELOG.md
@@ -7,6 +7,13 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [0.4.0](https://github.com/wolfv/sigstore-rust/compare/sigstore-types-v0.3.0...sigstore-types-v0.4.0) - 2025-11-28
+
+### Other
+
+- add missing file
+- introduce new artifact api
+
 ## [0.3.0](https://github.com/wolfv/sigstore-rust/compare/sigstore-types-v0.2.0...sigstore-types-v0.3.0) - 2025-11-28
 
 ### Other
diff --git a/crates/sigstore-verify/CHANGELOG.md b/crates/sigstore-verify/CHANGELOG.md
index 08b1e19..5efdfcb 100644
--- a/crates/sigstore-verify/CHANGELOG.md
+++ b/crates/sigstore-verify/CHANGELOG.md
@@ -7,6 +7,12 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [0.4.0](https://github.com/wolfv/sigstore-rust/compare/sigstore-verify-v0.3.0...sigstore-verify-v0.4.0) - 2025-11-28
+
+### Other
+
+- introduce new artifact api
+
 ## [0.3.0](https://github.com/wolfv/sigstore-rust/compare/sigstore-verify-v0.2.0...sigstore-verify-v0.3.0) - 2025-11-28
 
 ### Other