diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index b1be615..61ed480 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -17,7 +17,7 @@ jobs:
     name: build sdist and wheel
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@v5
 
     - name: build sdist and wheel
       run: |
@@ -45,15 +45,17 @@ jobs:
         - "3.10"
         - "3.11"
         - "3.12"
+        - "3.13"
+        - "3.14"
 
     steps:
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@v5
 
-    - uses: actions/setup-python@v5
+    - uses: actions/setup-python@v6
       with:
         python-version: ${{ matrix.python-version }}
 
-    - uses: actions/download-artifact@v4
+    - uses: actions/download-artifact@v5
       with:
         name: artifact
         path: ./dist
@@ -86,7 +88,7 @@ jobs:
       id-token: write
 
     steps:
-    - uses: actions/download-artifact@v4
+    - uses: actions/download-artifact@v5
       with:
         name: artifact
         path: ./dist
diff --git a/.github/workflows/stale.yml b/.github/workflows/stale.yml
index 2b26722..6f899e7 100644
--- a/.github/workflows/stale.yml
+++ b/.github/workflows/stale.yml
@@ -12,7 +12,7 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-    - uses: actions/stale@v4.0.0
+    - uses: actions/stale@v10.1.0
       id: stale
       with:
         days-before-stale: 28
diff --git a/HISTORY.rst b/HISTORY.rst
index 159841e..f471c28 100644
--- a/HISTORY.rst
+++ b/HISTORY.rst
@@ -1,6 +1,10 @@
 History
 =======
 
+1.4.0: 2025-10-16
+-----------
+- Added ``channel_bindings`` support to ``HTTPSPNEGOAuth`` to control whether channel bindings are used.
+
 1.3.0: 2024-02-16
 -----------
 - Drop flag for out of sequence detection
diff --git a/README.rst b/README.rst
index c62cbb5..f9c84c7 100644
--- a/README.rst
+++ b/README.rst
@@ -246,7 +246,7 @@ Channel Bindings
 ----------------
 
 Optional simplified support for channel bindings is available, but limited to
-the 'tls-server-end-point' bindings type (manual construction of different
+the ``tls-server-end-point`` bindings type (manual construction of different
 channel bindings can be achieved using the raw API). When requesting this kind
 of bindings python-cryptography must be available as request-gssapi will try
 to import its x509 module to process the peer certificate.
diff --git a/pyproject.toml b/pyproject.toml
index ff5bf7c..d72e47f 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -1,6 +1,6 @@
 [build-system]
 requires = [
-    "setuptools >= 61.0.0", # Support for setuptools config in pyproject.toml
+    "setuptools >= 77.0.0", # Support for SPDX license expressions
 ]
 build-backend = "setuptools.build_meta"
 
@@ -9,22 +9,23 @@ name = "requests-gssapi"
 description = "A GSSAPI authentication handler for python-requests"
 readme = "README.rst"
 requires-python = ">=3.8"
-license = { file = "LICENSE" }
+license = "ISC"
 authors = [
     { name = "Robbie Harwood", email = "rharwood@redhat.com" },
     { name = "Ian Cordasco" },
     { name = "Cory Benfield" },
     { name = "Michael Komitee" },
 ]
-keywords = ["ansible", "debug", "lsp", "dap"]
+keywords = ["gssapi", "requests", "auth"]
 classifiers = [
-    "License :: OSI Approved :: ISC License (ISCL)",
     "Programming Language :: Python :: 3",
     "Programming Language :: Python :: 3.8",
     "Programming Language :: Python :: 3.9",
     "Programming Language :: Python :: 3.10",
     "Programming Language :: Python :: 3.11",
     "Programming Language :: Python :: 3.12",
+    "Programming Language :: Python :: 3.13",
+    "Programming Language :: Python :: 3.14",
 ]
 dependencies = [
     "requests >= 1.1.0",
diff --git a/src/requests_gssapi/__init__.py b/src/requests_gssapi/__init__.py
index eca9cea..05c9142 100644
--- a/src/requests_gssapi/__init__.py
+++ b/src/requests_gssapi/__init__.py
@@ -30,4 +30,4 @@
     "OPTIONAL",
     "DISABLED",
 )
-__version__ = "1.3.0"
+__version__ = "1.4.0"