diff --git a/CHANGELOG.md b/CHANGELOG.md
index eb8f6ed90e..a16e5f976c 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,5 +1,25 @@
 # Changelog
 
+## [3.9.1](https://github.com/aws/aws-database-encryption-sdk-dynamodb/compare/v3.9.0...v3.9.1) (2026-02-06)
+
+This release is available in the following languages:
+
+- .NET
+
+### Fixes
+
+- **java:** drop hkdf offset method ([#2011](https://github.com/aws/aws-database-encryption-sdk-dynamodb/issues/2011)) ([b8f29f9](https://github.com/aws/aws-database-encryption-sdk-dynamodb/commit/b8f29f914d2c593de83304a186869aec12f020e3))
+
+### Maintenance
+
+- **java:** fix GetEncryptedDataKeyDescription java Example ([#1973](https://github.com/aws/aws-database-encryption-sdk-dynamodb/issues/1973)) ([ba8fcb7](https://github.com/aws/aws-database-encryption-sdk-dynamodb/commit/ba8fcb7f9aca01ce20cfcd3bc4f2fc0087b5fc9d))
+- move go out of pull/push/daily into its own ([#2005](https://github.com/aws/aws-database-encryption-sdk-dynamodb/issues/2005)) ([1b961b5](https://github.com/aws/aws-database-encryption-sdk-dynamodb/commit/1b961b585e1b2491424b078add248bf7f319f2a3))
+- **net:** Add plaintext to encrypted table migration example ([#1976](https://github.com/aws/aws-database-encryption-sdk-dynamodb/issues/1976)) ([814acbf](https://github.com/aws/aws-database-encryption-sdk-dynamodb/commit/814acbf2ad5d4e0826617b6764b32b16574332ab))
+- remove test against latest mpl version ([#2008](https://github.com/aws/aws-database-encryption-sdk-dynamodb/issues/2008)) ([728158e](https://github.com/aws/aws-database-encryption-sdk-dynamodb/commit/728158e1b0ef83ae41d475bca56419f05928015b))
+- **rust:** add plaintext to encrypted table migration examples ([#1977](https://github.com/aws/aws-database-encryption-sdk-dynamodb/issues/1977)) ([5286619](https://github.com/aws/aws-database-encryption-sdk-dynamodb/commit/52866190608fcec6bff17adcc01bfd6f04367464))
+- **rust:** fips feature ([#1980](https://github.com/aws/aws-database-encryption-sdk-dynamodb/issues/1980)) ([516fd3d](https://github.com/aws/aws-database-encryption-sdk-dynamodb/commit/516fd3d1e63e2e96b3c8f6feb6f1e85411ab810d))
+- **rust:** improved blocking ([#2030](https://github.com/aws/aws-database-encryption-sdk-dynamodb/issues/2030)) ([162c86c](https://github.com/aws/aws-database-encryption-sdk-dynamodb/commit/162c86c9117bd3048949fa77ab878eee4b6197ff))
+
 ## [3.9.0](https://github.com/aws/aws-database-encryption-sdk-dynamodb/compare/v3.8.1...v3.9.0) (2025-06-25)
 
 This release is available in the following languages:
@@ -190,7 +210,7 @@ This release is available in the following languages:
 ### Features
 
 - **DynamoDbEncryption:** Add GetEncryptedDataKeyDescription operation ([#856](https://github.com/aws/aws-database-encryption-sdk-dynamodb/issues/856)) ([8f8471a](https://github.com/aws/aws-database-encryption-sdk-dynamodb/commit/8f8471a479d9e7526dd8aaa6f34c906d2a0e2dbb))
-- Bump MPL to 1.4 ([#1067](https://github.com/aws/aws-database-encryption-sdk-dynamodb/issues/1067)) ([51bbab5](https://github.com/aws/aws-database-encryption-sdk-dynamodb/commit/51bbab5589a5db611a3b7564a1c9703fb0de1a23)). This provides three new KMSConfiguration options when constructing a KeyStore (see https://docs.aws.amazon.com/encryption-sdk/latest/developer-guide/use-hierarchical-keyring.html). To KmsKeyArn are added KmsMRKeyArn, Discovery and MrDiscovery.
+- Bump MPL to 1.4 ([#1067](https://github.com/aws/aws-database-encryption-sdk-dynamodb/issues/1067)) ([51bbab5](https://github.com/aws/aws-database-encryption-sdk-dynamodb/commit/51bbab5589a5db611a3b7564a1c9703fb0de1a23)). This provides three new KMSConfiguration options when constructing a KeyStore (see <https://docs.aws.amazon.com/encryption-sdk/latest/developer-guide/use-hierarchical-keyring.html>). To KmsKeyArn are added KmsMRKeyArn, Discovery and MrDiscovery.
 
 ### Maintenance
 
@@ -288,7 +308,7 @@ DB-ESDK for DynamoDB supports SIGN_ONLY and ENCRYPT_AND_SIGN attribute actions.
 
 This update addresses the issue by ensuring that any Set values are canonicalized in the same order while written to DynamoDB as when read back from DynamoDB.
 
-See: https://github.com/aws/aws-database-encryption-sdk-dynamodb-java/tree/v3.1.1/DecryptWithPermute for additional details for additional details
+See: <https://github.com/aws/aws-database-encryption-sdk-dynamodb-java/tree/v3.1.1/DecryptWithPermute> for additional details for additional details
 
 ## 3.1.0 2023-09-07
 
diff --git a/DynamoDbEncryption/runtimes/net/AssemblyInfo.cs b/DynamoDbEncryption/runtimes/net/AssemblyInfo.cs
index 98166b96ad..9cb4343b0a 100644
--- a/DynamoDbEncryption/runtimes/net/AssemblyInfo.cs
+++ b/DynamoDbEncryption/runtimes/net/AssemblyInfo.cs
@@ -3,5 +3,5 @@
 [assembly: AssemblyTitle("AWS.Cryptography.DbEncryptionSDK.DynamoDb")]
 
 // This should be kept in sync with the version number in MPL.csproj
-[assembly: AssemblyVersion("3.9.0")]
+[assembly: AssemblyVersion("3.9.1")]
 
diff --git a/DynamoDbEncryption/runtimes/net/DynamoDbEncryption.csproj b/DynamoDbEncryption/runtimes/net/DynamoDbEncryption.csproj
index b451e73b36..335a2584b5 100644
--- a/DynamoDbEncryption/runtimes/net/DynamoDbEncryption.csproj
+++ b/DynamoDbEncryption/runtimes/net/DynamoDbEncryption.csproj
@@ -5,7 +5,7 @@
     <GenerateAssemblyInfo>false</GenerateAssemblyInfo>
     <IsPackable>true</IsPackable>
 
-    <Version>3.9.0</Version>
+    <Version>3.9.1</Version>
 
     <AssemblyName>AWS.Cryptography.DbEncryptionSDK.DynamoDb</AssemblyName>
     <PackageId>AWS.Cryptography.DbEncryptionSDK.DynamoDb</PackageId>
diff --git a/project.properties b/project.properties
index df074b2249..9b0227e65c 100644
--- a/project.properties
+++ b/project.properties
@@ -1,4 +1,4 @@
-projectJavaVersion=3.9.0-SNAPSHOT
+projectJavaVersion=3.9.1
 mplDependencyJavaVersion=1.11.2-SNAPSHOT
 dafnyVersion=4.9.0
 dafnyVerifyVersion=4.9.1