diff --git a/CHANGELOG.md b/CHANGELOG.md
new file mode 100644
index 0000000..44f810e
--- /dev/null
+++ b/CHANGELOG.md
@@ -0,0 +1,13 @@
+# Changelog
+
+All notable changes to this project will be documented in this file.
+
+The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/) and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
+
+## [Unreleased]
+
+## [4.0.6](https://github.com/dbmdz/iiif-server-demo/releases/tag/4.0.6) - 2022-04-01
+
+### Changed
+
+- Updated Spring Boot to fix CVE-2022-22965
diff --git a/pom.xml b/pom.xml
index bc927ba..6083dbe 100644
--- a/pom.xml
+++ b/pom.xml
@@ -11,7 +11,7 @@
 
   <groupId>de.digitalcollections</groupId>
   <artifactId>iiif-server-demo</artifactId>
-  <version>4.0.6-SNAPSHOT</version>
+  <version>4.0.6</version>
   <packaging>jar</packaging>
 
   <name>DigitalCollections: IIIF Server Demo</name>