diff --git a/bfabric/docs/changelog.md b/bfabric/docs/changelog.md
index b44c9df6..255d53d3 100644
--- a/bfabric/docs/changelog.md
+++ b/bfabric/docs/changelog.md
@@ -14,9 +14,10 @@ Minor breaking changes are still possible in `1.X.Y` but we try to announce them
 - An unknown query field (e.g. `status` on an endpoint without it), a SOAP server fault, or a connection lost mid-request now raise `BfabricRequestError` / `BfabricUnavailableError` instead of raw suds exceptions, so `bfabric-cli` reports them in one line instead of a traceback.
 - `use_client` reports a `ValueError`, `OSError`, YAML error or HTTP error status from the command or from loading the config (e.g. no config file yet) as one `Error:` line instead of a traceback; the new `report_user_errors` context manager applies the same handling elsewhere.
 - An unknown config environment (e.g. a typo in `--config-env`) raises a `ValueError` listing the available environments instead of a `KeyError`.
-- OAuth requests to an instance recorded with an `http://` base URL are sent over `https://` instead of failing on the server's redirect (loopback hosts excepted). `bfabric.oauth.https_base_url` exposes the upgrade.
 - On a CPU without the features polars needs (e.g. AVX2), importing polars through `bfabric` raises polars' `RuntimeWarning` telling you to install `polars[rtcompat]`, instead of the process dying with "Illegal instruction".
 
+## \[1.24.0\] - 2026-10-05
+
 ### Added
 
 - `upload_files` accepts `on_hash_progress`, called while each file's MD5 is computed; `bfabric-cli workunit upload` shows it as a progress bar.
@@ -31,6 +32,7 @@ Minor breaking changes are still possible in `1.X.Y` but we try to announce them
 
 - `upload_files` resuming an interrupted upload no longer fails with `importResourceIds count must match resourceIds count`. Interrupted uploads saved by an earlier version restart from byte 0 instead of resuming.
 - `upload_files` resuming an interrupted run no longer fails with a 409 conflict: files that already finished are reported as uploaded, and files that never started reuse the resource created for them.
+- OAuth requests to an instance recorded with an `http://` base URL are sent over `https://` instead of failing on the server's redirect (loopback hosts excepted). `bfabric.oauth.https_base_url` exposes the upgrade.
 
 ## \[1.23.0\] - 2026-09-16
 
diff --git a/bfabric/pyproject.toml b/bfabric/pyproject.toml
index af446168..ceeb0b6f 100644
--- a/bfabric/pyproject.toml
+++ b/bfabric/pyproject.toml
@@ -6,7 +6,7 @@ build-backend = "hatchling.build"
 name = "bfabric"
 description = "Python client for the B-Fabric API"
 readme = "README.md"
-version = "1.23.0"
+version = "1.24.0"
 license = { text = "GPL-3.0" }
 authors = [
     { name = "Christian Panse", email = "cp@fgcz.ethz.ch" },
diff --git a/bfabric_app_runner/docs/changelog.md b/bfabric_app_runner/docs/changelog.md
index b38b2aa1..0a48465d 100644
--- a/bfabric_app_runner/docs/changelog.md
+++ b/bfabric_app_runner/docs/changelog.md
@@ -4,6 +4,12 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/).
 
 ## \[Unreleased\]
 
+## \[0.9.1\] - 2026-10-05
+
+### Changed
+
+- Require `bfabric>=1.24.0,<1.25`.
+
 ## \[0.9.0\] - 2026-09-16
 
 ### Changed
diff --git a/bfabric_app_runner/pyproject.toml b/bfabric_app_runner/pyproject.toml
index 2a9a1976..c777e465 100644
--- a/bfabric_app_runner/pyproject.toml
+++ b/bfabric_app_runner/pyproject.toml
@@ -6,7 +6,7 @@ build-backend = "hatchling.build"
 name = "bfabric_app_runner"
 description = "Application runner for B-Fabric apps"
 readme = "README.md"
-version = "0.9.0"
+version = "0.9.1"
 license = { text = "GPL-3.0" }
 authors = [
     { name = "Leonardo Schwarz", email = "leonardo.schwarz@fgcz.ethz.ch" },
@@ -14,7 +14,7 @@ authors = [
 ]
 requires-python = ">=3.12"
 dependencies = [
-    "bfabric>=1.23.0,<1.24",
+    "bfabric>=1.24.0,<1.25",
     "cyclopts>=4.0,<5.0",
     "pydantic>=2.12.3,<3.0",
     "glom>=24.11,<25.0",
diff --git a/bfabric_scripts/docs/changelog.md b/bfabric_scripts/docs/changelog.md
index 062667c0..c75b3208 100644
--- a/bfabric_scripts/docs/changelog.md
+++ b/bfabric_scripts/docs/changelog.md
@@ -3,6 +3,11 @@
 ### Fixed
 
 - `bfabric-cli` reports user errors in one `Error:` line instead of a traceback: an unknown field (e.g. `api read ... --query status ...`), a missing file or config, a missing entity, a malformed config or JSON, an HTTP error from the OAuth endpoints, and an unknown method in `api inspect`. Set `BFABRICPY_LOG_LEVEL=DEBUG` to see the traceback.
+
+## \[1.19.0\] - 2026-10-05
+
+### Fixed
+
 - `bfabric-cli login` and `auth device-code` no longer fail on an environment recorded with an `http://` base URL; they use `https://` and save the corrected URL.
 
 ### Changed
diff --git a/bfabric_scripts/pyproject.toml b/bfabric_scripts/pyproject.toml
index 28b7ce75..8089d692 100644
--- a/bfabric_scripts/pyproject.toml
+++ b/bfabric_scripts/pyproject.toml
@@ -6,7 +6,7 @@ build-backend = "hatchling.build"
 name = "bfabric_scripts"
 description = "Python command line scripts for the B-Fabric API"
 readme = "README.md"
-version = "1.18.0"
+version = "1.19.0"
 authors = [
     { name = "Christian Panse", email = "cp@fgcz.ethz.ch" },
     { name = "Claudio Cannizzaro", email = "claudio.cannizzaro@fgcz.uzh.ch" },
@@ -18,7 +18,7 @@ authors = [
 ]
 
 dependencies = [
-    "bfabric[transfer]>=1.23.0,<2",
+    "bfabric[transfer]>=1.24.0,<2",
     "cyclopts>=4.0,<5.0",
     "Flask>=3.0.3,<4.0",
     "questionary>=2.0,<3",