diff --git a/cmd/ja4sentinel/main.go b/cmd/ja4sentinel/main.go
index 079ca93..3e6d895 100644
--- a/cmd/ja4sentinel/main.go
+++ b/cmd/ja4sentinel/main.go
@@ -23,7 +23,7 @@ import (
 
 var (
 	// Version information (set via ldflags)
-	Version   = "1.1.8"
+	Version   = "1.1.9"
 	BuildTime = "unknown"
 	GitCommit = "unknown"
 )
diff --git a/packaging/rpm/ja4sentinel.spec b/packaging/rpm/ja4sentinel.spec
index c61513c..a72ba83 100644
--- a/packaging/rpm/ja4sentinel.spec
+++ b/packaging/rpm/ja4sentinel.spec
@@ -3,7 +3,7 @@
 %if %{defined build_version}
 %define spec_version %{build_version}
 %else
-%define spec_version 1.1.8
+%define spec_version 1.1.9
 %endif
 
 Name:           ja4sentinel
@@ -123,6 +123,15 @@ fi
 
 %changelog
 
+* Wed Mar 04 2026 Jacquin Antoine <rpm@arkel.fr> - 1.1.9-1
+- FEATURE: Add source IP exclusion with CIDR support
+- New exclude_source_ips configuration option
+- Support single IPs (192.168.1.1) and CIDR ranges (10.0.0.0/8)
+- Filter packets before TLS processing to reduce load
+- IPv4 and IPv6 support
+- New ipfilter package with unit tests
+- Log exclusion configuration at startup
+
 * Wed Mar 04 2026 Jacquin Antoine <rpm@arkel.fr> - 1.1.8-1
 - CRITICAL FIX: Resolve crash in TLS parser with nil decode context
 - Use gopacket.NewPacket with LinkTypeIPv4/IPv6 instead of DecodeFromBytes