diff --git a/CHANGELOG.md b/CHANGELOG.md
index a7f2ee2..2c91a32 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,5 +1,7 @@
 ## Changelog
 
+- **v5.0.9**
+  - fixed: cors preflight should reflect requested headers as the default (required for credentials)
 - **v5.0.7**
   - fixed: withParams could attempt to bind null (collision with node adapter)
 - **v5.0.6**
diff --git a/package.json b/package.json
index df257a1..28682ca 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "itty-router",
-  "version": "5.0.8",
+  "version": "5.0.9",
   "description": "A tiny, zero-dependency router, designed to make beautiful APIs in any environment.",
   "main": "./index.js",
   "module": "./index.mjs",