From d268ed208a03364fecd45bf8e07a35b7408b3b2c Mon Sep 17 00:00:00 2001
From: Philipp Wollermann <philwo@google.com>
Date: Wed, 14 Apr 2021 19:43:30 +0200
Subject: [PATCH] Prepare release 0.4.1 (#235)

---
 CHANGELOG.md | 6 ++++++
 package.json | 2 +-
 2 files changed, 7 insertions(+), 1 deletion(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 265ff550..0108b317 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,5 +1,11 @@
 # Change Log
 
+## Version 0.4.1 (April 14, 2021)
+
+### Bug Fixes
+
+- Fix CVE-2021-22539: Malicious project can cause vscode-bazel to run arbitrary executable when linting a \*.bzl file.
+
 ## Version 0.4.0 (August 21, 2020)
 
 ### New Features
diff --git a/package.json b/package.json
index 576263cf..5680393d 100644
--- a/package.json
+++ b/package.json
@@ -2,7 +2,7 @@
     "name": "vscode-bazel",
     "displayName": "Bazel",
     "description": "Bazel BUILD integration",
-    "version": "0.4.0",
+    "version": "0.4.1",
     "publisher": "BazelBuild",
     "license": "Apache-2.0",
     "repository": {