Update CHANGELOG.md

Fixes the 1.0.39 release date, thanks to @jhheider for reporting.

Author: jgriffiths

CHANGELOG.md

@@ -4,7 +4,32 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
-## [1.0.39] - 2026-13-06
+## [1.0.40] - 2026-04-24
+
+### Added
+- Support importing exported Google Authenticator OTP records.
+- Support showing OTP secrets as text or a QR.
+- Support showing BIP85/BIP39 qr codes.
+- Support DIY device ESP32-S3-DevKitC-1.
+
+### Changed
+- Allow entering indices/numbers directly without requiring leading zeros.
+- Improve unlock screen display text for clarity.
+- Minor firmware size and display performance optimizations.
+- Update jade_builder docker image.
+
+### Fixed
+- Fix a crash when verifying a BIP85 mnemonic.
+- Reject mnemonic import for invalid and non-12/24 word mnemonics.
+- Reject OTP registration for unsupported periods.
+- Clear secrets from memory more diligently after UI display.
+- Always confirm all outputs when Green recovery signing.
+- Upgrade cbor2 to 5.9.0 to fix upstream parsing issues.
+- Upgrade libwally to release 1.5.3.
+- Various libjade fixes and improvements.
+
+
+## [1.0.39] - 2026-03-06
 
 ### Added
 - Support for signing Green 2of3 recovery transactions as the recovery signer.