diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 6236beb..c0df71f 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -92,6 +92,12 @@ jobs:
         run: ./gradlew assembleRelease
         working-directory: example/android
 
+      - name: 🔑 License backend hint
+        if: failure()
+        run: |
+          echo "::warning::The example app applies app.talsec.plugin, which requests a license token from portal-backend.talsec.app during the build."
+          echo "::warning::If the log shows 'Cannot resolve license', check that the backend is up and reachable from the runner before investigating this PR."
+
   build-ios:
     name: Build iOS Example (${{ matrix.package-manager }})
     runs-on: macos-latest
diff --git a/CHANGELOG.md b/CHANGELOG.md
index ef1a68d..d96da5a 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -5,6 +5,27 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [4.0.0] - 2026-09-30
+
+- Android SDK version: 19.3.1
+- iOS SDK version: 7.1.4
+
+### Capacitor
+
+#### Breaking
+
+- Android builds now require the `app.talsec.plugin` Gradle plugin
+
+### Android
+
+#### Breaking
+
+- Changed Talsec integration from Maven dependency to the `app.talsec.plugin` Gradle plugin with `talsec { }` configuration block
+
+#### Fixed
+
+- Root detection related bugs causing false positives
+
 ## [3.2.2] - 2026-09-29
 
 - Android SDK version: 19.2.3
diff --git a/android/build.gradle b/android/build.gradle
index fe3e0f4..88c88ac 100644
--- a/android/build.gradle
+++ b/android/build.gradle
@@ -76,5 +76,5 @@ dependencies {
     androidTestImplementation "androidx.test.ext:junit:$androidxJunitVersion"
     androidTestImplementation "androidx.test.espresso:espresso-core:$androidxEspressoCoreVersion"
     
-    implementation 'com.aheaditec.talsec.security:TalsecSecurity-Community-Capacitor:19.2.3'
+    implementation 'com.aheaditec.talsec.security:TalsecSecurity-Community-Capacitor:19.3.1'
 }
diff --git a/example/android/app/build.gradle b/example/android/app/build.gradle
index 2d92711..a781191 100644
--- a/example/android/app/build.gradle
+++ b/example/android/app/build.gradle
@@ -1,4 +1,5 @@
 apply plugin: 'com.android.application'
+apply plugin: 'app.talsec.plugin'
 
 android {
     namespace "io.ionic.starter"
diff --git a/example/android/build.gradle b/example/android/build.gradle
index 007b55b..58a6359 100644
--- a/example/android/build.gradle
+++ b/example/android/build.gradle
@@ -9,11 +9,14 @@ buildscript {
     repositories {
         google()
         mavenCentral()
+        maven { url 'https://europe-west3-maven.pkg.dev/talsec-artifact-repository/plugin' }
     }
     dependencies {
         classpath 'com.android.tools.build:gradle:8.11.2'
         classpath 'com.google.gms:google-services:4.4.2'
         classpath "org.jetbrains.kotlin:kotlin-gradle-plugin:$kotlin_version"
+        // TODO: set the real version once app.talsec.plugin with wrapper support is released
+        classpath 'app.talsec.plugin:talsec-security-plugin:1.1.0'
 
         // NOTE: Do not place your application dependencies here; they belong
         // in the individual module build.gradle files
diff --git a/package.json b/package.json
index e16eeeb..ba1f550 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "capacitor-freerasp",
-  "version": "3.2.2",
+  "version": "4.0.0",
   "description": "Capacitor plugin for improving app security and threat monitoring on Android and iOS mobile devices",
   "main": "dist/plugin.cjs.js",
   "module": "dist/esm/index.js",