diff --git a/nghttp2.spec b/nghttp2.spec
index f0b7d9b..55f5362 100644
--- a/nghttp2.spec
+++ b/nghttp2.spec
@@ -1,7 +1,7 @@
 Summary: Experimental HTTP/2 client, server and proxy
 Name: nghttp2
-Version: 1.39.2
-Release: 2%{?dist}
+Version: 1.40.0
+Release: 1%{?dist}
 License: MIT
 URL: https://nghttp2.org/
 Source0: https://github.com/tatsuhiro-t/nghttp2/releases/download/v%{version}/nghttp2-%{version}.tar.xz
@@ -114,6 +114,9 @@ make %{?_smp_mflags} check
 
 
 %changelog
+* Fri Nov 15 2019 Kamil Dudka <kdudka@redhat.com> 1.40.0-1
+- update to the latest upstream release
+
 * Thu Nov 14 2019 Kamil Dudka <kdudka@redhat.com> 1.39.2-2
 - enable use of libxml2 to make `nghttp --get-assets` work (#1772462)
 
diff --git a/sources b/sources
index 229ee3c..2cbb0d1 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (nghttp2-1.39.2.tar.xz) = d8c971543e3e87736dfafebca55e9ecd0644e304c9731edaccba34170205824476595861a439077289b438ad489dd6008dedf2c6b2c111920300329be1b1bf34
+SHA512 (nghttp2-1.40.0.tar.xz) = 3f9b989c4bd9571b11bb9d59fe2dfd5596ba3962babfc836587d5047e780400a6cf46e43c602caa25ca83c03b84a1629953140d45223099b193df54a719745ce