diff --git a/ChangeLog.md b/ChangeLog.md
index d79ce07..50509ff 100755
--- a/ChangeLog.md
+++ b/ChangeLog.md
@@ -3,6 +3,9 @@ Web Authentication change log
 
 ## ?.?.? / ????-??-??
 
+## 4.0.0 / 2024-02-04
+
+* Implemented xp-framework/rfc#341: Drop XP <= 9 compatibility - @thekid
 * **Heads up**: Removed deprecated *Token* class which has been replaced
   by `web.auth.oauth.BySecret`
   (@thekid)
diff --git a/composer.json b/composer.json
index c5cee72..276aded 100755
--- a/composer.json
+++ b/composer.json
@@ -6,7 +6,7 @@
   "description" : "Web Authentication",
   "keywords": ["module", "xp"],
   "require" : {
-    "xp-framework/core": "^11.0 | ^10.0 | ^9.0 | ^8.0 | ^7.0",
+    "xp-framework/core": "^11.0 | ^10.0",
     "xp-framework/http": "^10.0 | ^9.0 | ^8.0 | ^7.0",
     "xp-framework/xml": "^11.0 | ^10.0 | ^9.0 | ^8.0",
     "xp-forge/web": "^4.0 | ^3.0 | ^2.0 | ^1.0",