diff --git a/CHANGELOG.rst b/CHANGELOG.rst
index 997d65510..022b5aaa5 100644
--- a/CHANGELOG.rst
+++ b/CHANGELOG.rst
@@ -2,6 +2,25 @@
 Changelog
 *********
 
+4.0.7 -- 2026-08-31
+===================
+
+Fixes
+-----------
+* fix: validate encryption context entry lengths (#813)
+  `#813 <https://github.com/aws/aws-encryption-sdk-python/pull/813>`_
+
+  Thanks to kiwigitops for the contribution.
+* fix: preserve root-cause errors in KMSMasterKey exception chaining (#815)
+  `#815 <https://github.com/aws/aws-encryption-sdk-python/pull/815>`_
+
+  Thanks to `@arpitjain099 <https://github.com/arpitjain099>`_ for the contribution.
+
+Maintenance
+-----------
+* deps: Extend supported `MPL`_ versions to include v1.11.3
+  `#816 <https://github.com/aws/aws-encryption-sdk-python/pull/816>`_
+
 4.0.6 -- 2026-05-07
 ===================
 
diff --git a/requirements_mpl.txt b/requirements_mpl.txt
index 85d8ace04..6d747d9c4 100644
--- a/requirements_mpl.txt
+++ b/requirements_mpl.txt
@@ -1 +1 @@
-aws-cryptographic-material-providers>=1.7.4,<=1.11.2
+aws-cryptographic-material-providers>=1.7.4,<=1.11.3
diff --git a/setup.py b/setup.py
index 200911bd5..fb249a3f6 100644
--- a/setup.py
+++ b/setup.py
@@ -43,7 +43,7 @@ def get_requirements():
     license="Apache License 2.0",
     install_requires=get_requirements(),
     extras_require={
-        "MPL": ["aws-cryptographic-material-providers>=1.7.4,<=1.11.2"],
+        "MPL": ["aws-cryptographic-material-providers>=1.7.4,<=1.11.3"],
     },
     classifiers=[
         "Development Status :: 5 - Production/Stable",
diff --git a/src/aws_encryption_sdk/identifiers.py b/src/aws_encryption_sdk/identifiers.py
index c41e91811..4a801b02f 100644
--- a/src/aws_encryption_sdk/identifiers.py
+++ b/src/aws_encryption_sdk/identifiers.py
@@ -17,7 +17,7 @@
     # We only actually need these imports when running the mypy checks
     pass
 
-__version__ = "4.0.6"
+__version__ = "4.0.7"
 USER_AGENT_SUFFIX = "AwsEncryptionSdkPython/{}".format(__version__)
 
 
diff --git a/test_vector_handlers/requirements_mpl.txt b/test_vector_handlers/requirements_mpl.txt
index 85d8ace04..6d747d9c4 100644
--- a/test_vector_handlers/requirements_mpl.txt
+++ b/test_vector_handlers/requirements_mpl.txt
@@ -1 +1 @@
-aws-cryptographic-material-providers>=1.7.4,<=1.11.2
+aws-cryptographic-material-providers>=1.7.4,<=1.11.3