diff --git a/CHANGELOG.md b/CHANGELOG.md
index 00e2d07e..d19639d8 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,5 +1,40 @@
 # Changelog
 
+## 1.9.0 (2023-04-26)
+
+This is a **SECURITY** and feature release for the 1.x series of ReactPHP's HTTP component.
+
+*   Security fix: This release fixes a medium severity security issue in ReactPHP's HTTP server component
+    that affects all versions between `v0.8.0` and `v1.8.0`. All users are encouraged to upgrade immediately.
+    (CVE-2023-26044 reported and fixed by @WyriHaximus)
+
+*   Feature: Support HTTP keep-alive for HTTP client (reusing persistent connections).
+    (#481, #484, #486 and #495 by @clue)
+
+    This feature offers significant performance improvements when sending many
+    requests to the same host as it avoids recreating the underlying TCP/IP
+    connection and repeating the TLS handshake for secure HTTPS requests.
+
+    ```php
+    $browser = new React\Http\Browser();
+
+    // Up to 300% faster! HTTP keep-alive is enabled by default
+    $response = React\Async\await($browser->get('https://httpbingo.org/redirect/6'));
+    assert($response instanceof Psr\Http\Message\ResponseInterface);
+    ```
+
+*   Feature: Add `Request` class to represent outgoing HTTP request message.
+    (#480 by @clue)
+
+*   Feature: Preserve request method and body for `307 Temporary Redirect` and `308 Permanent Redirect`.
+    (#442 by @dinooo13)
+
+*   Feature: Include buffer logic to avoid dependency on reactphp/promise-stream.
+    (#482 by @clue)
+
+*   Improve test suite and project setup and report failed assertions.
+    (#478 by @clue, #487 and #491 by @WyriHaximus and #475 and #479 by @SimonFrings)
+
 ## 1.8.0 (2022-09-29)
 
 *   Feature: Support for default request headers.
diff --git a/README.md b/README.md
index 271f5e87..955e0a99 100644
--- a/README.md
+++ b/README.md
@@ -2976,7 +2976,7 @@ This project follows [SemVer](https://semver.org/).
 This will install the latest supported version:
 
 ```bash
-composer require react/http:^1.8
+composer require react/http:^1.9
 ```
 
 See also the [CHANGELOG](CHANGELOG.md) for details about version upgrades.