diff --git a/.release-please-manifest.json b/.release-please-manifest.json
index 0ee8c01..2537c1f 100644
--- a/.release-please-manifest.json
+++ b/.release-please-manifest.json
@@ -1,3 +1,3 @@
 {
-  ".": "0.3.0"
+  ".": "0.4.0"
 }
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 5f20776..0cd8541 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -5,6 +5,15 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [0.4.0](https://github.com/bedrock-python/touchmark/compare/v0.3.0...v0.4.0) (2026-10-09)
+
+
+### Features
+
+* **azuredevops:** deliver to Azure DevOps Services ([#23](https://github.com/bedrock-python/touchmark/issues/23)) ([dd4be4b](https://github.com/bedrock-python/touchmark/commit/dd4be4b8a78cbd30d068a1c7ec8705a9e6ff6bb1))
+* **bitbucket:** deliver to Bitbucket Cloud ([#20](https://github.com/bedrock-python/touchmark/issues/20)) ([73200b0](https://github.com/bedrock-python/touchmark/commit/73200b04cf938b40c206d77fdd7b49c5b57a8306))
+* **bitbucket:** run a hub on Bitbucket Pipelines ([#22](https://github.com/bedrock-python/touchmark/issues/22)) ([532dad8](https://github.com/bedrock-python/touchmark/commit/532dad87361bae032fc8f1c7973639d6ea7bb6d9))
+
 ## [0.3.0](https://github.com/bedrock-python/touchmark/compare/v0.2.0...v0.3.0) (2026-10-08)
 
 
diff --git a/README.md b/README.md
index 0a41cb6..4d33392 100644
--- a/README.md
+++ b/README.md
@@ -23,8 +23,8 @@ Three ways in, one version number:
 
 | | | |
 |---|---|---|
-| **GitHub Action** | `uses: bedrock-python/touchmark@<commit> # v0.3.0` | The hub's workflows on GitHub. Runs the release's image by digest, after checking its build provenance. [The Action](https://bedrock-python.github.io/touchmark/reference/action/) |
-| **Container image** | `ghcr.io/bedrock-python/touchmark:0.3.0` | GitLab CI, Gitea and Forgejo Actions, `docker run`: touchmark and git on Alpine, as a non-root user. [Run it in CI](https://bedrock-python.github.io/touchmark/guide/ci/) |
+| **GitHub Action** | `uses: bedrock-python/touchmark@<commit> # v0.4.0` | The hub's workflows on GitHub. Runs the release's image by digest, after checking its build provenance. [The Action](https://bedrock-python.github.io/touchmark/reference/action/) |
+| **Container image** | `ghcr.io/bedrock-python/touchmark:0.4.0` | GitLab CI, Gitea and Forgejo Actions, `docker run`: touchmark and git on Alpine, as a non-root user. [Run it in CI](https://bedrock-python.github.io/touchmark/guide/ci/) |
 | **Binary** | [Releases](https://github.com/bedrock-python/touchmark/releases) | Linux, macOS and Windows on amd64 and arm64, one static binary; or `go install github.com/bedrock-python/touchmark/cmd/touchmark@latest` with Go 1.26 or newer. [Installation](https://bedrock-python.github.io/touchmark/getting-started/installation/) |
 
 <!-- x-release-please-end -->
@@ -75,7 +75,7 @@ Three ways in, one version number:
 <!-- x-release-please-start-version -->
 ```bash
 # The binary for your platform, from the release
-v=0.3.0
+v=0.4.0
 curl -fsSLO "https://github.com/bedrock-python/touchmark/releases/download/v$v/touchmark_${v}_linux_amd64.tar.gz"
 tar -xzf "touchmark_${v}_linux_amd64.tar.gz" touchmark
 
@@ -83,7 +83,7 @@ tar -xzf "touchmark_${v}_linux_amd64.tar.gz" touchmark
 go install github.com/bedrock-python/touchmark/cmd/touchmark@latest
 
 # The image
-docker pull ghcr.io/bedrock-python/touchmark:0.3.0
+docker pull ghcr.io/bedrock-python/touchmark:0.4.0
 ```
 <!-- x-release-please-end -->
 
@@ -164,7 +164,7 @@ runs the Action; its plan step on a hub pull request:
 
 <!-- x-release-please-start-version -->
 ```yaml
-- uses: bedrock-python/touchmark@<commit> # v0.3.0
+- uses: bedrock-python/touchmark@<commit> # v0.4.0
   with:
     command: plan
     strict: true
diff --git a/action.yml b/action.yml
index 02b0c7f..408c0f0 100644
--- a/action.yml
+++ b/action.yml
@@ -90,7 +90,7 @@ runs:
         # the latest release's version, or 0.0.0 before the first one, which
         # run.sh refuses. The step's own env: a workflow cannot override them.
         TM_IMAGE: ghcr.io/bedrock-python/touchmark
-        TM_VERSION: "0.3.0" # x-release-please-version
+        TM_VERSION: "0.4.0" # x-release-please-version
         # gh needs a token to start; with --bundle-from-oci it reads the
         # attestation from the registry, not from the GitHub API. The
         # container never gets it (run.sh passes CI, GITHUB_* and