docs: add v0.4.0 CHANGELOG, update dependency versions in README

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Author: vveerrgg

CHANGELOG.md

@@ -7,6 +7,25 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [0.4.0] - 2026-03-06
+
+### Changed
+- **Pino 10:** Upgraded logger from pino ^8.x to ^10.3.1
+- **UUID 13:** Upgraded from uuid ^9.x to ^13.0.0
+- **Vitest 4:** Upgraded test framework
+- **esbuild:** Replaced webpack with esbuild for browser bundling
+- **nostr-crypto-utils** dependency upgraded to ^0.6.0
+- Dropped Node.js 16 support, CI runs on Node 20.x + 22.x
+
+### Added
+- NIP-44 encryption and NIP-46 transport via nostr-crypto-utils v0.5.1
+- CommonJS `package.json` in dist/cjs for Node-RED compatibility
+
+### Fixed
+- WSS enforcement, payload size limits, backoff jitter, rate limiter cleanup
+- Resolved npm audit vulnerabilities
+- Fixed broken typedoc links in README
+
 ## [0.3.14] - 2025-02-19
 
 ### Changed

README.md

@@ -176,10 +176,10 @@ See the `examples/browser.html` file for a complete example of browser usage.
 ## Dependencies
 
 This package uses:
-- nostr-crypto-utils (^0.4.2) for cryptographic operations
-- pino (^8.17.2) for logging
-- ws (^8.16.0) for WebSocket functionality
-- uuid (^9.0.0) for unique identifiers
+- nostr-crypto-utils (^0.6.0) for cryptographic operations
+- pino (^10.3.1) for logging
+- ws (^8.19.0) for WebSocket functionality
+- uuid (^13.0.0) for unique identifiers
 
 ## Documentation