diff --git a/.release-please-manifest.json b/.release-please-manifest.json
index 7840fde..4fcfdf7 100644
--- a/.release-please-manifest.json
+++ b/.release-please-manifest.json
@@ -1,3 +1,3 @@
 {
-  ".": "1.8.1"
+  ".": "1.9.0"
 }
diff --git a/CHANGELOG.md b/CHANGELOG.md
index a4b1281..ba39273 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,5 +1,27 @@
 # Changelog
 
+## [1.9.0](https://github.com/ChipWolf/dotfiles/compare/v1.8.1...v1.9.0) (2026-05-14)
+
+
+### Features
+
+* add Zed, Claude Code/Desktop, komorebi support and refactor choco management ([3785100](https://github.com/ChipWolf/dotfiles/commit/37851007f6c8f39f2168bc562b7a279c36b6e621))
+
+
+### Bug Fixes
+
+* add missing chezmoiignore entries and document Zed MCP target ([4429c77](https://github.com/ChipWolf/dotfiles/commit/4429c779b2d817ee7b12d6313946565279cd038a))
+* **git:** use cross-platform null hooks path on Windows ([#68](https://github.com/ChipWolf/dotfiles/issues/68)) ([5032e2f](https://github.com/ChipWolf/dotfiles/commit/5032e2f4f01e295671eb5ca954193acfce203dd2))
+* **windows:** place mise-shim.exe next to choco-installed mise.exe ([42529ba](https://github.com/ChipWolf/dotfiles/commit/42529ba6f6597833f1db65292a873f0c05cc0459))
+
+
+### Miscellaneous
+
+* **agents:** add rule for inspecting PR diffs against origin/main ([146de93](https://github.com/ChipWolf/dotfiles/commit/146de930ec94121d9a5e0af96a3d6d7f8d247c2a))
+* **agents:** add rules for branch verification and stale git lock files ([2611695](https://github.com/ChipWolf/dotfiles/commit/261169578f3991737e0fcf448b8be193f9148bb3))
+* **agents:** move Twilio IaC lessons to project-local memory ([29a4062](https://github.com/ChipWolf/dotfiles/commit/29a4062d7764a1befcec59376bea2d3199a47a48))
+* **agents:** verify IaC exporters and browser vs shell auth ([bc50ae5](https://github.com/ChipWolf/dotfiles/commit/bc50ae58aff81da6ea56b6dea40c4e079537422c))
+
 ## [1.8.1](https://github.com/ChipWolf/dotfiles/compare/v1.8.0...v1.8.1) (2026-05-11)
 
 
diff --git a/README.md b/README.md
index 376ce30..797015d 100644
--- a/README.md
+++ b/README.md
@@ -49,14 +49,14 @@ Opinionated dotfiles managed with [chezmoi](https://chezmoi.io). One repo config
 > [!WARNING]
 > These scripts fetch and execute code from this repo in a single command. Review them first if that matters to you, or use the [inspect-first path](#inspect-first) below.
 >
-> The install scripts are published as [GitHub Release](https://github.com/chipwolf/dotfiles/releases/tag/v1.8.1) assets with [SLSA Build L3](https://slsa.dev/spec/v1.0/levels#build-l3) provenance, verified with: `gh attestation verify install.sh --repo chipwolf/dotfiles` <!-- x-release-please-version -->
+> The install scripts are published as [GitHub Release](https://github.com/chipwolf/dotfiles/releases/tag/v1.9.0) assets with [SLSA Build L3](https://slsa.dev/spec/v1.0/levels#build-l3) provenance, verified with: `gh attestation verify install.sh --repo chipwolf/dotfiles` <!-- x-release-please-version -->
 
 **macOS / Linux**
 
 <!-- x-release-please-start-version -->
 
 ```sh
-sh -c "$(curl -fsSL https://github.com/chipwolf/dotfiles/releases/download/v1.8.1/install.sh)"
+sh -c "$(curl -fsSL https://github.com/chipwolf/dotfiles/releases/download/v1.9.0/install.sh)"
 ```
 
 <!-- x-release-please-end -->
@@ -66,7 +66,7 @@ sh -c "$(curl -fsSL https://github.com/chipwolf/dotfiles/releases/download/v1.8.
 <!-- x-release-please-start-version -->
 
 ```powershell
-irm https://github.com/chipwolf/dotfiles/releases/download/v1.8.1/install.ps1 | iex
+irm https://github.com/chipwolf/dotfiles/releases/download/v1.9.0/install.ps1 | iex
 ```
 
 <!-- x-release-please-end -->
@@ -226,7 +226,7 @@ All release artifacts are built with [SLSA Build L3](https://slsa.dev/spec/v1.0/
 
 This covers:
 
-- **Install scripts** ([`install.sh.tmpl`](install.sh.tmpl), [`install.ps1.tmpl`](install.ps1.tmpl)): published as [GitHub Release](https://github.com/chipwolf/dotfiles/releases/tag/v1.8.1) assets after CI template rendering. <!-- x-release-please-version -->
+- **Install scripts** ([`install.sh.tmpl`](install.sh.tmpl), [`install.ps1.tmpl`](install.ps1.tmpl)): published as [GitHub Release](https://github.com/chipwolf/dotfiles/releases/tag/v1.9.0) assets after CI template rendering. <!-- x-release-please-version -->
 - **Codespaces overlay image** ([ghcr.io/chipwolf/dotfiles](https://ghcr.io/chipwolf/dotfiles)): published to GHCR.
 
 > [!NOTE]
@@ -241,7 +241,7 @@ Verify:
 gh attestation verify install.sh --repo chipwolf/dotfiles
 
 # Container image
-gh attestation verify oci://ghcr.io/chipwolf/dotfiles:v1.8.1 --repo chipwolf/dotfiles
+gh attestation verify oci://ghcr.io/chipwolf/dotfiles:v1.9.0 --repo chipwolf/dotfiles
 ```
 
 <!-- x-release-please-end -->