diff --git a/httpcore-1.0.8.tar.gz b/httpcore-1.0.8.tar.gz
deleted file mode 100644
index 0bba746..0000000
--- a/httpcore-1.0.8.tar.gz
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:3f5d4682325020efd4a5140028d37f40d01f1c961dbb8de6a46d2236cc5d7d3b
-size 99995
diff --git a/httpcore-1.0.9.tar.gz b/httpcore-1.0.9.tar.gz
new file mode 100644
index 0000000..a7d01de
--- /dev/null
+++ b/httpcore-1.0.9.tar.gz
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:eb542a99b37a2d6307dcbbd8b3da3b798ef9c20e82ce2e976d8ec7444cd0472c
+size 100038
diff --git a/python-httpcore.changes b/python-httpcore.changes
index a10480d..8f14f61 100644
--- a/python-httpcore.changes
+++ b/python-httpcore.changes
@@ -1,3 +1,10 @@
+-------------------------------------------------------------------
+Fri Apr 25 11:36:42 UTC 2025 - Markéta Machová <mmachova@suse.com>
+
+- Update to 1.0.9
+  * Resolve https://github.com/advisories/GHSA-vqfr-h8mv-ghfj with h11 
+    dependency update. (#1008)
+
 -------------------------------------------------------------------
 Wed Apr 16 14:22:23 UTC 2025 - Felix Stegmeier <felix.stegmeier@suse.com>
 
diff --git a/python-httpcore.spec b/python-httpcore.spec
index 936d81a..427e187 100644
--- a/python-httpcore.spec
+++ b/python-httpcore.spec
@@ -27,7 +27,7 @@
 
 %{?sle15_python_module_pythons}
 Name:           python-httpcore%{psuffix}
-Version:        1.0.8
+Version:        1.0.9
 Release:        0
 Summary:        Minimal low-level Python HTTP client
 License:        BSD-3-Clause
@@ -43,8 +43,8 @@ BuildRequires:  %{python_module wheel}
 BuildRequires:  fdupes
 BuildRequires:  python-rpm-macros
 Requires:       python-certifi
+Requires:       python-h11 >= 0.16
 Requires:       (python-anyio >= 3 with python-anyio < 5)
-Requires:       (python-h11 >= 0.13.0 with python-h11 < 0.15)
 Requires:       (python-sniffio >= 1.0 with python-sniffio < 2)
 Recommends:     python-h2 >= 3.0
 Recommends:     python-socksio >= 1.0