diff --git a/google_auth-2.39.0.tar.gz b/google_auth-2.39.0.tar.gz
deleted file mode 100644
index 945e813b7afcb6fb7c066202ee7d786f38b040e4..0000000000000000000000000000000000000000
Binary files a/google_auth-2.39.0.tar.gz and /dev/null differ
diff --git a/google_auth-2.40.2.tar.gz b/google_auth-2.40.2.tar.gz
new file mode 100644
index 0000000000000000000000000000000000000000..c9a4f6a579c99d3e548fa9786c194f4bb6311650
Binary files /dev/null and b/google_auth-2.40.2.tar.gz differ
diff --git a/python-google-auth.spec b/python-google-auth.spec
index e1318116611b8fc4775fb211f48f6aa86cb61e72..7c5d99ac6a07e3772f1a60645ff57fe8d5cb25a1 100644
--- a/python-google-auth.spec
+++ b/python-google-auth.spec
@@ -1,6 +1,6 @@
 %global _empty_manifest_terminate_build 0
 Name:		python-google-auth
-Version:	2.39.0
+Version:	2.40.2
 Release:	1
 Summary:	Google Authentication Library
 License:	Apache-2.0
@@ -81,6 +81,14 @@ mv %{buildroot}/doclist.lst .
 %{_docdir}/*
 
 %changelog
+* Wed May 28 2025 chengwei <chenwei@teligen.net> - 2.40.2-1
+- update to 2.40.2
+- Remove sync response logs in AuthorizedSession
+- Update test to consider new error message from cryptography
+- Disable logging response body for async logs 
+- Add request response logging to auth
+- Correct webauthn JSON parsing to be compliant with standard.
+
 * Mon May 19 2025  openeuler_bot <infra@openeuler.sh> - 2.39.0-1
 - Adds GA support for X.509 workload identity federation (version: 2.39.0).
 - Add impersonated SA via local ADC support for fetch_id_token (version: 2.39.0).