diff --git a/paramiko-3.5.1.tar.gz b/paramiko-3.5.1.tar.gz
deleted file mode 100644
index ba23508d0155560854ecc2abbeff81f3601c03f9..0000000000000000000000000000000000000000
Binary files a/paramiko-3.5.1.tar.gz and /dev/null differ
diff --git a/paramiko-4.0.0.tar.gz b/paramiko-4.0.0.tar.gz
new file mode 100644
index 0000000000000000000000000000000000000000..7257740127d9537929b9626a93db326ca452c5fb
Binary files /dev/null and b/paramiko-4.0.0.tar.gz differ
diff --git a/python-paramiko.spec b/python-paramiko.spec
index f40129ffe0a94cba3846044137ea078f14d0e71e..11abfecb328b9a952a29ee84c2bc069c17a7711f 100644
--- a/python-paramiko.spec
+++ b/python-paramiko.spec
@@ -1,5 +1,5 @@
 Name:          python-paramiko
-Version:       3.5.1
+Version:       4.0.0
 Release:       1
 Summary:       Python SSH module
 License:       LGPLv2+
@@ -13,6 +13,7 @@ Patch9000:     add-insecure-algorithm-log.patch
 BuildArch:     noarch
 
 BuildRequires: python3-pip  python3-hatchling python3-hatch-vcs python3-wheel
+BuildRequires: python3-icecream
 
 %description
 Paramiko is a combination of the Esperanto words for "paranoid" and "friend". It is a module
@@ -69,6 +70,11 @@ PYTHONPATH=%{buildroot}%{python3_sitelib} pytest-%{python3_version}
 %doc html/ demos/ README.rst
 
 %changelog
+* Tue Aug 26 2025 jinshuaiyu <jinshuaiyu@kylinos.cn> - 4.0.0-1
+- Update package to version 4.0.0
+- Removed support for the DSA (aka DSS) key algorithm, as it has been badly outdated and insecure for a decade or more at this point, and was recently completely removed from OpenSSH as well.
+- Migrated packaging metadata and practices to use pyproject.toml
+
 * Tue Jun 24 2025  openeuler_bot <infra@openeuler.sh> - 3.5.1-1
 - update python-paramiko to 3.5.1