diff --git a/.gitignore b/.gitignore
index d01211d..fc2deaf 100644
--- a/.gitignore
+++ b/.gitignore
@@ -434,3 +434,4 @@ network-manager-applet-0.8.1.tar.bz2
 /NetworkManager-1.43.6.tar.xz
 /NetworkManager-1.43.7.tar.xz
 /NetworkManager-1.43.8.tar.xz
+/NetworkManager-1.43.9.tar.xz
diff --git a/NetworkManager.spec b/NetworkManager.spec
index 8951eaf..9caaeed 100644
--- a/NetworkManager.spec
+++ b/NetworkManager.spec
@@ -4,7 +4,7 @@
 %global glib2_version %(pkg-config --modversion glib-2.0 2>/dev/null || echo bad)
 
 %global epoch_version 1
-%global real_version 1.43.8
+%global real_version 1.43.9
 %global rpm_version %{real_version}
 %global release_version 1
 %global snapshot %{nil}
@@ -1251,6 +1251,11 @@ fi
 
 
 %changelog
+* Wed May 31 2023 Thomas Haller <thaller@redhat.com> - 1:1.43.9-1
+- Update to 1.43.9 release (development)
+- improve autoconnect logic for port/controller configurations (rh #2121451)
+- fix handling external devices during network off/on (rh #2149012)
+
 * Tue May 16 2023 Beniamino Galvani <bgalvani@redhat.com> - 1:1.43.8-1
 - Update to 1.43.8 release (development)
 - ipv6ll: don't regenerate the address when it's removed externally (rh #2196441)
diff --git a/sources b/sources
index 0c5153f..81a9fe7 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (NetworkManager-1.43.8.tar.xz) = 0658101cf399358c3f9735f14c5af0a28371d8abea73df4890a2545a3e141a349632bccd321edc1b1e844cc44b33359b5b326b68f27798623d5b731bcce2b13c
+SHA512 (NetworkManager-1.43.9.tar.xz) = e495d2291ac4be3a41f07d6159eaecedab857e8420417fc039e6918eacdd1a30254fd82fc818b695ab8b96af55c696af8276eb2058986d6d847193a2384609e9