diff --git a/CHANGELOG.md b/CHANGELOG.md
index 80b3325..20fe750 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -6,7 +6,7 @@ SPDX-License-Identifier: Apache-2.0
 
 # Changelog
 
-## 4.0.2-SNAPSHOT
+## 4.0.2
 - Fix: `verify`: Do not include detached signature in list of certificates
 - Fix: `inline-verify`: Also include the first argument in list of certificates
 - Hide stacktraces by default and add `--stacktrace` option to print them
diff --git a/version.gradle b/version.gradle
index f24e9f0..8e84d17 100644
--- a/version.gradle
+++ b/version.gradle
@@ -5,7 +5,7 @@
 allprojects {
     ext {
         shortVersion = '4.0.2'
-        isSnapshot = true
+        isSnapshot = false
         minAndroidSdk = 10
         javaSourceCompatibility = 1.8
         junitVersion = '5.8.2'