diff --git a/.github/actions/report/README.md b/.github/actions/report/README.md
index cab035f..6a8b258 100644
--- a/.github/actions/report/README.md
+++ b/.github/actions/report/README.md
@@ -19,7 +19,7 @@ permissions:
 steps:
   - uses: actions/checkout@v4
   - run: npm test -- --coverage        # your tests write coverage/lcov.info
-  - uses: CoverageTracker/coverage-tracker/.github/actions/report@v0.3.0
+  - uses: CoverageTracker/coverage-tracker/.github/actions/report@v0.4.0
     with:
       worker-url: https://coverage-tracker.yourdomain.com
 ```
diff --git a/.github/actions/report/package-lock.json b/.github/actions/report/package-lock.json
index 1c76b23..9ffb038 100644
--- a/.github/actions/report/package-lock.json
+++ b/.github/actions/report/package-lock.json
@@ -1,12 +1,12 @@
 {
   "name": "coverage-tracker-report-action",
-  "version": "0.3.0",
+  "version": "0.4.0",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "coverage-tracker-report-action",
-      "version": "0.3.0",
+      "version": "0.4.0",
       "dependencies": {
         "@actions/core": "^3.0.1",
         "@actions/github": "^9.1.1",
diff --git a/.github/actions/report/package.json b/.github/actions/report/package.json
index 380fe76..20400cc 100644
--- a/.github/actions/report/package.json
+++ b/.github/actions/report/package.json
@@ -1,6 +1,6 @@
 {
   "name": "coverage-tracker-report-action",
-  "version": "0.3.0",
+  "version": "0.4.0",
   "private": true,
   "description": "Node runner for the coverage-tracker report action",
   "main": "dist/index.js",
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index d9c61ef..0f7320f 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -79,7 +79,11 @@ jobs:
           retention-days: 30
 
       - name: Report coverage
-        uses: CoverageTracker/coverage-tracker/.github/actions/report@v0.3.0
+        # Local path, not a pinned release tag: this repo dogfoods its own
+        # action, so it should always run the exact code on this branch/ref
+        # rather than a released version that may lag behind (or, during
+        # release prep, not exist yet as a tag at all).
+        uses: ./.github/actions/report
         with:
           worker-url: https://demo.coveragetracker.dev
           coverage-path: dashboard/coverage/lcov.info
@@ -115,7 +119,7 @@ jobs:
         run: npm run test:coverage
 
       - name: Report coverage
-        uses: CoverageTracker/coverage-tracker/.github/actions/report@v0.3.0
+        uses: ./.github/actions/report
         with:
           worker-url: https://demo.coveragetracker.dev
           category: backend
diff --git a/.github/workflows/claude-code-review.yml b/.github/workflows/claude-code-review.yml
index b5e8cfd..0a0417d 100644
--- a/.github/workflows/claude-code-review.yml
+++ b/.github/workflows/claude-code-review.yml
@@ -39,6 +39,7 @@ jobs:
           plugin_marketplaces: 'https://github.com/anthropics/claude-code.git'
           plugins: 'code-review@claude-code-plugins'
           prompt: '/code-review:code-review ${{ github.repository }}/pull/${{ github.event.pull_request.number }}'
+          allowed_bots: "dependabot[bot],copilot[bot]"
           # See https://github.com/anthropics/claude-code-action/blob/main/docs/usage.md
           # or https://code.claude.com/docs/en/cli-reference for available options
 
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 6066c3a..102c62f 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -4,6 +4,22 @@ All notable changes to this project are documented here. The format is based on
 [Keep a Changelog](https://keepachangelog.com/en/1.1.0/), and this project
 adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [0.4.0] — 2026-07-07
+
+### Added
+
+- support multiple named coverage categories per project (9491d66)
+
+### Changed
+
+- Add ScanCode license scanning workflow (a174f0c)
+- "Claude Code Review workflow" (f4d9b9d)
+- "Claude PR Assistant workflow" (33f8378)
+
+### Fixed
+
+- distinguish per-category PR checks and correct D1 database binding (502e3e4)
+
 ## [0.3.0] — 2026-07-05
 
 ### Added
@@ -94,5 +110,6 @@ always wins). See `docs/generating-coverage-reports.md`.
 - `coverage-report-go` / `coverage-report-python` / `coverage-report-js` inputs.
 - `dist/run.js` (replaced by `dist/index.js`).
 
+[0.4.0]: https://github.com/CoverageTracker/coverage-tracker/releases/tag/v0.4.0
 [0.3.0]: https://github.com/CoverageTracker/coverage-tracker/releases/tag/v0.3.0
 [0.2.0]: https://github.com/CoverageTracker/coverage-tracker/releases/tag/v0.2.0
diff --git a/README.md b/README.md
index 6e3f721..9853fce 100644
--- a/README.md
+++ b/README.md
@@ -100,7 +100,7 @@ permissions:
 steps:
   - uses: actions/checkout@v4
   - run: npm test -- --coverage        # writes coverage/lcov.info
-  - uses: CoverageTracker/coverage-tracker/.github/actions/report@v0.3.0
+  - uses: CoverageTracker/coverage-tracker/.github/actions/report@v0.4.0
     with:
       worker-url: https://coverage-tracker.yourdomain.com
       # coverage-path is optional — auto-detected. Thresholds are optional too:
diff --git a/dashboard/package-lock.json b/dashboard/package-lock.json
index 87250f9..f0e8a66 100644
--- a/dashboard/package-lock.json
+++ b/dashboard/package-lock.json
@@ -1,12 +1,12 @@
 {
   "name": "coverage-tracker-dashboard",
-  "version": "0.3.0",
+  "version": "0.4.0",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "coverage-tracker-dashboard",
-      "version": "0.3.0",
+      "version": "0.4.0",
       "dependencies": {
         "@sveltejs/kit": "^2.69.0",
         "svelte": "^5.56.4",
diff --git a/dashboard/package.json b/dashboard/package.json
index 8b7fc2b..23e0fee 100644
--- a/dashboard/package.json
+++ b/dashboard/package.json
@@ -1,7 +1,7 @@
 {
   "name": "coverage-tracker-dashboard",
   "private": true,
-  "version": "0.3.0",
+  "version": "0.4.0",
   "type": "module",
   "scripts": {
     "dev": "vite dev",
diff --git a/package-lock.json b/package-lock.json
index 1123cc2..7105060 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -1,12 +1,12 @@
 {
   "name": "coverage-tracker",
-  "version": "0.3.0",
+  "version": "0.4.0",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "coverage-tracker",
-      "version": "0.3.0",
+      "version": "0.4.0",
       "dependencies": {
         "hono": "^4.6.0",
         "jose": "^5.9.0",
diff --git a/package.json b/package.json
index 5526da6..e1a6cf2 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "coverage-tracker",
-  "version": "0.3.0",
+  "version": "0.4.0",
   "private": true,
   "scripts": {
     "dev": "wrangler dev --env dev",