diff --git a/libgusb-0.4.8.tar.xz b/libgusb-0.4.8.tar.xz
deleted file mode 100644
index ecf0453..0000000
--- a/libgusb-0.4.8.tar.xz
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:77aec51de289afe3bf5f8a1a36ae989d1a59748391097242949daccda9569ede
-size 51632
diff --git a/libgusb-0.4.9.tar.xz b/libgusb-0.4.9.tar.xz
new file mode 100644
index 0000000..9ae8283
--- /dev/null
+++ b/libgusb-0.4.9.tar.xz
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:9df5ef301d6a4b361002aa52cce1165a87a89744055879bdbab31e7e86f1e846
+size 51672
diff --git a/libgusb.changes b/libgusb.changes
index 2d61ba1..3325cae 100644
--- a/libgusb.changes
+++ b/libgusb.changes
@@ -1,3 +1,12 @@
+-------------------------------------------------------------------
+Thu Jul 18 14:26:24 UTC 2024 - Dirk Müller <dmueller@suse.com>
+
+- update to 0.4.9:
+  * Allow reading HID descriptors larger than 255 bytes
+  * Close the libusb handle if returning open failure
+  * Fix a buffer over-read when emulating devices
+  * Only request the BOS descriptor when bcdUSB is new enough
+
 -------------------------------------------------------------------
 Wed Feb 28 14:31:20 UTC 2024 - Dominique Leuenberger <dimstar@opensuse.org>
 
diff --git a/libgusb.spec b/libgusb.spec
index 38b00bc..8f589c6 100644
--- a/libgusb.spec
+++ b/libgusb.spec
@@ -17,7 +17,7 @@
 
 
 Name:           libgusb
-Version:        0.4.8
+Version:        0.4.9
 Release:        0
 Summary:        GObject-based library for libusb1
 License:        LGPL-2.1-or-later