diff --git a/Directory.Build.props b/Directory.Build.props
index 9f925cf..13da6eb 100644
--- a/Directory.Build.props
+++ b/Directory.Build.props
@@ -20,28 +20,12 @@
- 0.4.0
+ 0.4.1
- **What's New**
-
-This release adds a fully interactive gallery UI, first-class sub-agent support, and native manifest endpoints for destination-agnostic skill sync.
-
-**New Features**
-- Add interactive gallery UI with client-side search, skill version history navigation, and a resource browser for viewing SKILL.md and resource files
-- Add first-class sub-agent support — storage endpoints, CLI commands (`publish-subagent`, `list-subagents`, `delete-subagent`, `download-subagent`, `lint subagent`), and batch publishing
-- Add native manifest endpoints (`/manifest.json` and linked documents) for RFC-compatible skill and sub-agent sync
-- Add deterministic `archive.zip` downloads for resourceful skills
-- Add API versioning and native manifest client support in `Netclaw.SkillClient`
-- Add copy button to code blocks in the gallery
-
-**Improvements**
-- Improve skill search relevance with exact and prefix name matching prioritized over description-only matches
-- Preserve executable permission bits (Unix mode) for skill resources in downloaded archives
-
-**Security**
-- Resolve CVE-2026-49451 / GHSA-v5pm-xwqc-g5wc by pinning `Microsoft.OpenApi` to 2.7.5 (#104)
-- Resolve GHSA-hv8m-jj95-wg3x (MessagePack/StreamJsonRpc LZ4 decompression DoS) by upgrading MessagePack to 3.1.8
+ **Bug Fixes**
+- Fix CLI `versions` command crashing with a 404 when a skill has no published versions — now returns gracefully (#143)
+- Fix Docker quick-start compose configuration so it runs as non-root against a writable `/data` volume (#141)
diff --git a/RELEASE_NOTES.md b/RELEASE_NOTES.md
index 9492b69..49d8366 100644
--- a/RELEASE_NOTES.md
+++ b/RELEASE_NOTES.md
@@ -1,3 +1,9 @@
+#### 0.4.1 July 22nd 2026 ####
+
+**Bug Fixes**
+- Fix CLI `versions` command crashing with a 404 when a skill has no published versions — now returns gracefully (#143)
+- Fix Docker quick-start compose configuration so it runs as non-root against a writable `/data` volume (#141)
+
#### 0.4.0 July 14th 2026 ####
**What's New**