diff --git a/.release-please-manifest.json b/.release-please-manifest.json
index 76d5538..b28fea9 100644
--- a/.release-please-manifest.json
+++ b/.release-please-manifest.json
@@ -1,3 +1,3 @@
 {
-  ".": "0.9.0"
+  ".": "0.9.1"
 }
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 7e59082..631f038 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,5 +1,13 @@
 # Changelog
 
+## [0.9.1](https://github.com/java-loader/jlo/compare/jlo-bin-v0.9.0...jlo-bin-v0.9.1) (2026-11-01)
+
+
+### Bug Fixes
+
+* **progress:** show a package once when it unpacks with no download in progress ([77d0a64](https://github.com/java-loader/jlo/commit/77d0a6489f08ab8e0ebe546443b906ad59125f06))
+* **deps:** update webpki-root-certs to 1.0.11, which drops the distrusted emSign roots (RUSTSEC-2025-0141) ([8cd51d0](https://github.com/java-loader/jlo/commit/8cd51d00a54c5d9e7e94f2a6ea604f4eb9e15f42))
+
 ## [0.9.0](https://github.com/java-loader/jlo/compare/jlo-bin-v0.8.0...jlo-bin-v0.9.0) (2026-10-19)
 
 
diff --git a/Cargo.lock b/Cargo.lock
index 0dff707..70b5f40 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -817,7 +817,7 @@ checksum = "8f42a60cbdf9a97f5d2305f08a87dc4e09308d1276d28c869c684d7777685682"
 
 [[package]]
 name = "jlo-bin"
-version = "0.9.0"
+version = "0.9.1"
 dependencies = [
  "anyhow",
  "assert_cmd",
diff --git a/Cargo.toml b/Cargo.toml
index 68d4796..6ad8cda 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "jlo-bin"
-version = "0.9.0"
+version = "0.9.1"
 edition = "2024"
 authors = ["Oliver Siegmar <oliver@siegmar.de>"]
 license = "MIT"