diff --git a/CHANGELOG.md b/CHANGELOG.md
index f29f89c..c3047c7 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,6 +3,10 @@
 One line per change, grouped by the release that shipped it. Newest
 first. Each release names the portal tag it is built against.
 
+## 0.4.0 (2026-09-24) - portal v0.4.0
+
+- Matches portal v0.4.0 (released by portal's publish job).
+
 ## 0.3.47 (2026-09-24) - portal v0.3.47
 
 - Matches portal v0.3.47 (released by portal's publish job).
diff --git a/Cargo.lock b/Cargo.lock
index 9397aca..c0c40fe 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -2196,7 +2196,7 @@ checksum = "791930b43c0d5973160d90a8f3894509f2b273430f5c5c73b668636d0287c5c0"
 
 [[package]]
 name = "iris"
-version = "0.3.47"
+version = "0.4.0"
 dependencies = [
  "anyhow",
  "async-nats",
@@ -3303,8 +3303,8 @@ dependencies = [
 
 [[package]]
 name = "portal"
-version = "0.3.47"
-source = "git+https://project.uhhm.no/uhhm/portal.git?tag=v0.3.47#9ed81944847c20cb6751e221e679449a8b5ebc47"
+version = "0.4.0"
+source = "git+https://project.uhhm.no/uhhm/portal.git?tag=v0.4.0#26c1762dfaa3d8b6900d61aa54de1e58065c6dcf"
 dependencies = [
  "anyhow",
  "arc-swap",
diff --git a/Cargo.toml b/Cargo.toml
index 7869891..443255c 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "iris"
-version = "0.3.47"
+version = "0.4.0"
 edition = "2021"
 description = "The iris over a portal site: nothing from a content repo comes through until it checks out"
 license = "MIT"
@@ -10,7 +10,7 @@ repository = "https://project.uhhm.no/uhhm/iris"
 # The site's own content types and loaders, so iris reads a repo exactly
 # the way the running site does. Pinned to the portal release it
 # matches; bumping this tag is what a new iris release is.
-portal = { git = "https://project.uhhm.no/uhhm/portal.git", tag = "v0.3.47", features = ["ssr"] }
+portal = { git = "https://project.uhhm.no/uhhm/portal.git", tag = "v0.4.0", features = ["ssr"] }
 anyhow = "1"
 serde = { version = "1", features = ["derive"] }
 serde_json = "1"