Update changelog

Author: kvz

CHANGELOG.md

@@ -2,6 +2,26 @@
 
 You may also want to refer to [GitHub releases](https://github.com/transloadit/node-sdk/releases).
 
+## v4.0.3
+
+Released: 2025-10-16.
+
+[Diff](https://github.com/transloadit/node-sdk/compare/v4.0.2...v4.0.3).
+
+- [x] Fix `smart_sig` CLI to always override embedded credentials with the env-provided auth key while preserving other auth fields.
+- [x] Ensure the CLI entrypoint executes when invoked through npm/yarn bin shims by resolving symlinks before bootstrapping.
+- [x] Harden validation and tests around CLI invocation paths.
+
+## v4.0.2
+
+Released: 2025-10-15.
+
+[Diff](https://github.com/transloadit/node-sdk/compare/v4.0.1...v4.0.2).
+
+- [x] Add `smart_sig` CLI command (usable via `npx transloadit smart_sig`) for signing params fed through stdin.
+- [x] Document the CLI workflow and expose the binary via package metadata.
+- [x] Validate CLI input with existing zod schemas and cover the flow with unit tests.
+
 ## v4.0.1
 
 Released: 2025-09-18.