diff --git a/Cargo.toml b/Cargo.toml
index 88a55790..3836084b 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -8,7 +8,7 @@ members = [
 resolver = "2"
 
 [workspace.package]
-version = "4.9.0"
+version = "4.9.1"
 repository = "https://github.com/cloudflare/boring"
 edition = "2021"
 
@@ -19,9 +19,9 @@ tag-prefix = ""
 publish = false
 
 [workspace.dependencies]
-boring-sys = { version = "4.9.0", path = "./boring-sys" }
-boring = { version = "4.9.0", path = "./boring" }
-tokio-boring = { version = "4.9.0", path = "./tokio-boring" }
+boring-sys = { version = "4.9.1", path = "./boring-sys" }
+boring = { version = "4.9.1", path = "./boring" }
+tokio-boring = { version = "4.9.1", path = "./tokio-boring" }
 
 bindgen = { version = "0.68.1", default-features = false, features = ["runtime"] }
 cmake = "0.1.18"
diff --git a/RELEASE_NOTES b/RELEASE_NOTES
index 6d000f47..ab943c5f 100644
--- a/RELEASE_NOTES
+++ b/RELEASE_NOTES
@@ -1,16 +1,20 @@
+
+4.9.1
+- 2024-08-04 Properly handle `Option<i32>` in `SslRef::set_curves`
+
 4.9.0
-- 2024-08-02   Guard against empty strings given to select_next_proto (#252)
-- 2024-08-01   Document `SslCurve::nid()`
-- 2024-08-01   Add SslCurve::to_nid() and remove SslCurveId
-- 2024-07-23   Fix x509_check_host return value
-- 2024-07-29   Fix clippy lints re: docs indentation + unused feature
-- 2024-07-29   Ignore clippy / rustfmt on autogenerated code
-- 2024-07-26   Clean up legacy const_fn feature gates
-- 2024-07-22   Impl From for SslVersion
-- 2024-06-03   Split SSL curve identifiers into a separate enum.
-- 2024-07-23   (ci): Fix macos crossbuild action by forcing brew link w python@3.11
-- 2024-07-09   Expose set_permute_extensions
-- 2024-06-24   PQ: fix timing sidechannels and add IPDWing
+- 2024-08-02 Guard against empty strings given to select_next_proto (#252)
+- 2024-08-01 Document `SslCurve::nid()`
+- 2024-08-01 Add SslCurve::to_nid() and remove SslCurveId
+- 2024-07-23 Fix x509_check_host return value
+- 2024-07-29 Fix clippy lints re: docs indentation + unused feature
+- 2024-07-29 Ignore clippy / rustfmt on autogenerated code
+- 2024-07-26 Clean up legacy const_fn feature gates
+- 2024-07-23 Impl From for SslVersion
+- 2024-06-03 Split SSL curve identifiers into a separate enum.
+- 2024-07-23 (ci): Fix macos crossbuild action by forcing brew link w python@3.11
+- 2024-07-09 Expose set_permute_extensions
+- 2024-06-24 PQ: fix timing sidechannels and add IPDWing
 
 4.8.0
 - 2024-06-28 Expose hmac_sha1 function
@@ -25,6 +29,8 @@
 - 2024-06-18 Add NIDs for cipher authentication types
 - 2024-06-14 Impl From for SslSignatureAlgorithm
 - 2024-03-27 Updates license field to valid SPDX format
+
+4.7.0
 - 2024-05-31 Fix crosscompile
 - 2024-05-30 Expose hmac_sha256/512 functions
 
@@ -40,8 +46,6 @@
 - 2024-03-21 Add getters for client hello message
 - 2024-01-25 Removes vestigial build script
 - 2024-02-02 Introduce and use read_uninit and write_uninit duplicated from openssl-0.10.61 and tokio-openssl-0.6.4
-
-4.3.0
 - 2024-02-07 Introduce SslRef::set_private_key
 
 4.4.1
@@ -52,6 +56,8 @@
 - 2024-01-16 Expose `set_compliance_policy` and `get_ciphers`
 - 2024-01-08 Expose SSL_get_error
 - 2023-12-20 Fix support for fips-link-precompiled
+
+4.3.0
 - 2024-01-03 Introduce X509Flags
 - 2024-01-03 Move x509 tests to a subdirectory
 - 2024-01-02 Rearrange imports in x509 module
@@ -94,6 +100,8 @@
 - 2023-11-02 Remove Sync trait bounds on callback futures
 - 2023-10-30 Update Cargo.toml
 - 2023-10-26 hyper and tokio "full" feature for dev builds only
+
+4.0.0-rc.1
 - 2023-10-26 Specify exact versions of dependent crates in the workspace manifest
 - 2023-10-16 Add CI for cross-building from macOS
 - 2023-10-16 Introduce BORING_BSSL_SYSROOT and BORING_BSSL_EXTERNAL_TOOLCHAIN