diff --git a/_service b/_service
index 9017172..09cd911 100644
--- a/_service
+++ b/_service
@@ -4,7 +4,7 @@
     <param name="url">https://github.com/fwupd/fwupd.git</param>
     <param name="scm">git</param>
     <param name="versionformat">@PARENT_TAG@</param>
-    <param name="revision">1.8.8</param>
+    <param name="revision">1.8.9</param>
   </service>
   <service name="tar" mode="buildtime"/>
   <service name="recompress" mode="buildtime">
diff --git a/fwupd-1.8.8.obscpio b/fwupd-1.8.8.obscpio
deleted file mode 100644
index 1ad23cf..0000000
--- a/fwupd-1.8.8.obscpio
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:26d710beb066dff74591118f90c241da0e15ecab6f46bb605532ced36ad47260
-size 16236557
diff --git a/fwupd-1.8.9.obscpio b/fwupd-1.8.9.obscpio
new file mode 100644
index 0000000..04f41dc
--- /dev/null
+++ b/fwupd-1.8.9.obscpio
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:255ed384340595abbc75f866528b9a6acf8bc5ffca18768950f3a57095ca9147
+size 16382989
diff --git a/fwupd.changes b/fwupd.changes
index 923a464..8c130d1 100644
--- a/fwupd.changes
+++ b/fwupd.changes
@@ -1,3 +1,33 @@
+-------------------------------------------------------------------
+Wed Jan  4 08:43:32 UTC 2023 - Paolo Stivanin <info@paolostivanin.com>
+
+- Update to 1.8.9:
+  + This release adds the following features:
+    - Add an interactive request for re-inserting the USB cable
+    - Add SHA384 support for TPM hashes
+    - Add X-FingerprintReader, X-GraphicsTablet, X-Dock and X-UsbDock categories
+    - Allow specifying OR parent requirements in metadata
+  + This release fixes the following bugs:
+    - Add the fwupd version to the HSI result if the chassis is invalid
+    - Allow getting the ESP when there is a block device with no filesystem
+    - Allow reinstalling on devices with only-version-upgrade set
+    - Do not require the TPM event log to have all reconstructions
+    - Fix a tiny memory leak when parsing signed reports
+    - Ignore failure to mount the ESP if unsupported
+    - Never allow using SHA-1 for checksum validation
+    - Return a more useful error if USB recovery failed
+    - Skip the fwupdx64.efi BootXXXX entry when measuring system integrity
+    - Speed up daemon startup using prepared XPath queries
+    - Suggest to turn on ThunderboltAccess for Lenovo systems
+    - Use better defaults if the config file is missing
+  + This release adds support for the following hardware:
+    - More Solidigm NVMe devices
+    - More Synaptics Cape devices
+    - More Synaptics Prometheus devices
+    - Most Texas Instruments USB-4 docks
+    - Scaler support for Wacom USB devices
+    - Several new Wistron USB-C docks
+
 -------------------------------------------------------------------
 Mon Dec 26 14:39:51 UTC 2022 - Bjørn Lie <bjorn.lie@gmail.com>
 
diff --git a/fwupd.obsinfo b/fwupd.obsinfo
index 676ae3c..d460050 100644
--- a/fwupd.obsinfo
+++ b/fwupd.obsinfo
@@ -1,4 +1,4 @@
 name: fwupd
-version: 1.8.8
-mtime: 1670438396
-commit: 1024d97d611404621aad0e3ffa815fe933420712
+version: 1.8.9
+mtime: 1672748150
+commit: faeefb66d03f30a76ff42281fff3d6e9536e9ccf
diff --git a/fwupd.spec b/fwupd.spec
index f25b39f..cdaa288 100644
--- a/fwupd.spec
+++ b/fwupd.spec
@@ -1,7 +1,7 @@
 #
 # spec file for package fwupd
 #
-# Copyright (c) 2022 SUSE LLC
+# Copyright (c) 2023 SUSE LLC
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -39,7 +39,7 @@
 %define shlib_sover  2
 
 Name:           fwupd
-Version:        1.8.8
+Version:        1.8.9
 Release:        0
 Summary:        Device firmware updater daemon
 License:        GPL-2.0-or-later AND LGPL-2.1-or-later
diff --git a/harden_fwupd-refresh.service.patch b/harden_fwupd-refresh.service.patch
index 92f0f44..fc136f6 100644
--- a/harden_fwupd-refresh.service.patch
+++ b/harden_fwupd-refresh.service.patch
@@ -1,7 +1,7 @@
-Index: fwupd-1.7.2/data/motd/fwupd-refresh.service.in
+Index: fwupd-1.8.9/data/motd/fwupd-refresh.service.in
 ===================================================================
---- fwupd-1.7.2.orig/data/motd/fwupd-refresh.service.in
-+++ fwupd-1.7.2/data/motd/fwupd-refresh.service.in
+--- fwupd-1.8.9.orig/data/motd/fwupd-refresh.service.in
++++ fwupd-1.8.9/data/motd/fwupd-refresh.service.in
 @@ -13,5 +13,13 @@ SystemCallFilter=~@mount
  ProtectKernelModules=yes
  ProtectControlGroups=yes