diff --git a/Cargo.toml b/Cargo.toml
index cb58bf7..77605e8 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -11,7 +11,7 @@ members = [
 ]
 
 [workspace.package]
-version = "0.1.8"
+version = "0.1.9"
 edition = "2021"
 authors = ["Echo <echo@moon-dragon.us>"]
 license = "MIT"
diff --git a/debian/changelog b/debian/changelog
index a39a3e5..ea100dc 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,3 +1,13 @@
+linux-patch-manager (0.1.9-1) noble; urgency=medium
+
+  * Fix: Replace broken DashMap rate limiting with tower-governor middleware
+  * Fix: Enrollment rate limiting was global (0.0.0.0 fallback) instead of per-IP
+  * Fix: Use SmartIpKeyExtractor for proper X-Forwarded-For support behind HAProxy
+  * Add: Configurable rate limit tiers via [rate_limit] in config.toml
+  * Add: Standard X-RateLimit-* and Retry-After headers on 429 responses
+
+ -- Echo <echo@moon-dragon.us>  Wed, 21 May 2026 02:38:00 +0000
+
 linux-patch-manager (0.1.7-1) noble; urgency=medium
 
   * Host Self-Enrollment: Added REST API and UI for automated agent enrollment
diff --git a/scripts/build-package.sh b/scripts/build-package.sh
index 514d8ed..64afc24 100755
--- a/scripts/build-package.sh
+++ b/scripts/build-package.sh
@@ -22,7 +22,7 @@ warn()  { echo -e "${YELLOW}[WARN]${NC}  $*"; }
 error() { echo -e "${RED}[ERROR]${NC} $*" >&2; exit 1; }
 
 PROJECT_ROOT="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
-VERSION="0.1.7"
+VERSION="0.1.9"
 RELEASE="1"
 PKG_NAME="linux-patch-manager"
 DEB_NAME="${PKG_NAME}_${VERSION}-${RELEASE}_amd64.deb"