diff --git a/CHANGELOG.md b/CHANGELOG.md
index e324719..eab7d66 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,5 +1,17 @@
 # Changelog
 
+## [4.3.0] - October 30, 2026
+
+### Changed
+
+**Local Holdouts: rule evaluation continues after a holdout hit**:
+When a user matches a local holdout on a rule, the SDK now excludes the user from that rule only
+and continues evaluating the remaining rules, instead of returning the holdout variation and skipping
+the rest of the flag. Each local holdout hit sends its own holdout impression event (using the
+existing event format), regardless of `sendFlagDecisions`. Global holdouts are unchanged.
+
+- chore(security): pin dev/CI Node to 22.23.4 (CVE-2026-111497) ([#353](https://github.com/optimizely/react-sdk/pull/353))
+
 ## [4.2.1] - September 18, 2026
 
 ### Bug Fixes
diff --git a/package-lock.json b/package-lock.json
index f08a178..ca889bc 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -1,12 +1,12 @@
 {
   "name": "@optimizely/react-sdk",
-  "version": "4.2.1",
+  "version": "4.3.0",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@optimizely/react-sdk",
-      "version": "4.2.1",
+      "version": "4.3.0",
       "license": "Apache-2.0",
       "dependencies": {
         "@optimizely/optimizely-sdk": "^6.6.1",
diff --git a/package.json b/package.json
index fbc9314..0880cba 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@optimizely/react-sdk",
-  "version": "4.2.1",
+  "version": "4.3.0",
   "description": "React SDK for Optimizely Feature Experimentation, Optimizely Full Stack (legacy), and Optimizely Rollouts",
   "homepage": "https://github.com/optimizely/react-sdk",
   "repository": "https://github.com/optimizely/react-sdk",
diff --git a/src/client/createInstance.ts b/src/client/createInstance.ts
index 6772b29..d76b86b 100644
--- a/src/client/createInstance.ts
+++ b/src/client/createInstance.ts
@@ -20,7 +20,7 @@ import { REACT_LOGGER } from '../logger/createLogger';
 import type { ReactLogger } from '../logger/ReactLogger';
 
 export const CLIENT_ENGINE = 'react-sdk';
-export const CLIENT_VERSION = '4.2.1';
+export const CLIENT_VERSION = '4.3.0';
 
 export const REACT_CLIENT_META = Symbol('react-client-meta');