diff --git a/.github/release-notes.md b/.github/release-notes.md
index f03962b3e5..728d254929 100644
--- a/.github/release-notes.md
+++ b/.github/release-notes.md
@@ -1,9 +1,10 @@
-<!-- release-version: 0.9.0 -->
+<!-- release-version: 0.9.1 -->
 
 <!-- release-section: highlights:start -->
 
 ## Highlights
 
+- The npm package includes Developer ID-signed native addons for Apple Silicon and Intel Macs. This lets Codex Desktop load the addon when preparing review items.
 - Deep Scan runs independent Standard reviews in batches. Workers can share leads and verify each other's evidence. The final report groups observations that have the same fix and retains the source locations from each review. [Deep Scan guide](https://github.com/openai/codex-security/blob/main/sdk/typescript/docs/cli.md#configure-deep-scans)
 - External scanner imports are enabled by default in the CLI, SDK, and plugin. You can preview supported reports, save findings locally, and publish supported findings to Cloud. The scanner guides list the accepted formats and which inputs are local-only. [Scanner import guides](https://github.com/openai/codex-security/blob/main/docs/scanner-imports/README.md)
 - `scans logs` finds sessions faster in large compressed histories. The GitHub Action also includes scan scope limitations in its job summary, including when a scan returns zero findings.
diff --git a/.github/release-pr-state.json b/.github/release-pr-state.json
index 57f720552c..6dab13cde1 100644
--- a/.github/release-pr-state.json
+++ b/.github/release-pr-state.json
@@ -1,14 +1,14 @@
 {
-  "baseVersion": "0.8.3",
-  "baseCommit": "f22b8b991ebfe0a348ec9b5c29341a5b48dee649",
+  "baseVersion": "0.9.0",
+  "baseCommit": "7cc6bae5003503e826aef70cb96fd042ea3d436a",
   "sections": {
     "highlights": {
-      "generatedHash": "9e7e57cc51cdb7c8747b7cdc33470b7c3b4af7ea289265c06280412b5ab7728a",
-      "humanOwned": false
+      "generatedHash": "1a95122d50517aa00b5e2dc8becaf9fb60a852238723dce499111c9504a991b2",
+      "humanOwned": true
     },
     "upgrades": {
-      "generatedHash": "2948040a17c453f501741772fae72fe5f8c6c893d96262a2a45ea017662c9286",
-      "humanOwned": false
+      "generatedHash": "f0e089f37da057fc30882ef40dfe50f6b52abdc17018bf2d70c34afb22c66fe2",
+      "humanOwned": true
     }
   }
 }
diff --git a/examples/github-actions/codex-security.yml b/examples/github-actions/codex-security.yml
index 30f95a4572..2217d47bba 100644
--- a/examples/github-actions/codex-security.yml
+++ b/examples/github-actions/codex-security.yml
@@ -32,7 +32,7 @@ jobs:
       security-events: write
       actions: read
     env:
-      CODEX_SECURITY_VERSION: "0.9.0"
+      CODEX_SECURITY_VERSION: "0.9.1"
       BEDROCK_MODEL_ID: ${{ vars.BEDROCK_MODEL_ID }}
       # Report-only by default. Set to "high" to fail on high/critical findings.
       FAIL_ON_SEVERITY: ""
diff --git a/github-action/package-lock.json b/github-action/package-lock.json
index 1b8a820c77..2f9e926b0d 100644
--- a/github-action/package-lock.json
+++ b/github-action/package-lock.json
@@ -1,12 +1,12 @@
 {
   "name": "codex-security-action",
-  "version": "0.9.0",
+  "version": "0.9.1",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "codex-security-action",
-      "version": "0.9.0",
+      "version": "0.9.1",
       "dependencies": {
         "@actions/artifact": "6.3.1",
         "@actions/core": "3.0.1",
diff --git a/github-action/package.json b/github-action/package.json
index 2b89021a37..310c1def24 100644
--- a/github-action/package.json
+++ b/github-action/package.json
@@ -1,6 +1,6 @@
 {
   "name": "codex-security-action",
-  "version": "0.9.0",
+  "version": "0.9.1",
   "private": true,
   "type": "module",
   "description": "Run Codex Security in GitHub Actions with explicit scope, budgets, and scan health reporting",
diff --git a/sdk/typescript/package.json b/sdk/typescript/package.json
index 9e952332d3..908a5f9e51 100644
--- a/sdk/typescript/package.json
+++ b/sdk/typescript/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@openai/codex-security",
-  "version": "0.9.0",
+  "version": "0.9.1",
   "description": "TypeScript SDK and CLI for Codex Security",
   "license": "Apache-2.0",
   "author": "OpenAI",