diff --git a/CHANGELOG.md b/CHANGELOG.md
index 7af90e6473ae74d83773420d302dbde169a7e098..74d07089ab8d2c05b4ab5cb18eff2c8ba863b7c6 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,5 +1,63 @@
 # Gitaly changelog
 
+## 12.9.0
+
+### Security (1 change)
+
+- Validate object pool relative paths to prevent path traversal attacks. !1900
+
+### Fixed (11 changes, 1 of them is from the community)
+
+- Handle malformed PID file. !1825 (maxmati)
+- Handle ambiguous refs in CommitLanguages. !1829
+- Enforce diff.noprefix=false for generating Git diffs. !1854
+- Fix expected porcelain output for PushResults. !1862
+- Properly account for tags in PushResults. !1874
+- ReplicateRepository error when result from FetchInternalRemote is false. !1879
+- Praefect should not emit Gitaly errors to Sentry. !1880
+- Task proto has dependency to already generated source code. !1884
+- Explicit error what type of path can't be read. !1891
+- Allow filters when advertising refs. !1894
+- Fix gitaly-ruby not starting on case-sensitive filesystems. !1939
+
+### Changed (6 changes)
+
+- Change ListRepositories RPC to RepostoryReplicas. !1692
+- Remove deprecated UserRebase RPC. !1851
+- Replication: propagate RenameRepository RPC to Praefect secondaries. !1853
+- Add node gauge that keeps track of node status. !1904
+- Praefect: use enum values for job states. !1906
+- Use millisecond precision for time in JSON logs.
+
+### Performance (1 change)
+
+- Use Rugged::Repository#bare over #new. !1920
+
+### Added (11 changes)
+
+- Praefect: add sql-migrate-down subcommand. !1770
+- Praefect SQL: support of transactions. !1815
+- Optionally keep divergent refs when mirroring. !1828
+- Push with the --porcelain flag and parse output of failed pushes. !1845
+- Internal RPC for walking Gitaly repos. !1855
+- Praefect: Move replication queue to database. !1865
+- Add basic auth support to clone analyzer. !1866
+- Praefect ping-node must verify storage locations are served. !1881
+- Support partial clones with SSH transports. !1893
+- Add storage name to healthcheck error log. !1934
+- Always use V2 tokens in gitaly auth client.
+
+### Other (7 changes)
+
+- Bypass praefect server in tests that check the error message. !1799
+- Set default concurrency limit for ReplicateRepository. !1822
+- Fix example Praefect config file for virtual storage changes. !1856
+- Add correlation ID to Praefect replication jobs. !1869
+- Remove dependency on the outdated golang.org/x/net package. !1882
+- Upgrade parser gem to v2.7.0.4. !1935
+- Simplify loading of required Ruby files. !1942
+
+
 ## 12.8.7
 
 - No changes.
diff --git a/VERSION b/VERSION
index d9f65a9076b5af8125ea5a6d2adfaf8cb502aa18..d581945ced28e0956f2c71c4b38185916a4cee7e 100644
--- a/VERSION
+++ b/VERSION
@@ -1 +1 @@
-12.9.0-rc4
+12.9.0
diff --git a/changelogs/unreleased/handle-malformed-pid.yml b/changelogs/unreleased/handle-malformed-pid.yml
deleted file mode 100644
index 60ccec6339e63018a3c76e8e530e327e1557ba46..0000000000000000000000000000000000000000
--- a/changelogs/unreleased/handle-malformed-pid.yml
+++ /dev/null
@@ -1,5 +0,0 @@
----
-title: Handle malformed PID file
-merge_request: 1825
-author: maxmati
-type: fixed
diff --git a/changelogs/unreleased/jc-add-node-gauge.yml b/changelogs/unreleased/jc-add-node-gauge.yml
deleted file mode 100644
index 98d500440a8613a948f70b29dd29910b30db2317..0000000000000000000000000000000000000000
--- a/changelogs/unreleased/jc-add-node-gauge.yml
+++ /dev/null
@@ -1,5 +0,0 @@
----
-title: Add node gauge that keeps track of node status
-merge_request: 1904
-author:
-type: changed
diff --git a/changelogs/unreleased/jc-add-storage-to-healthcheck-error.yml b/changelogs/unreleased/jc-add-storage-to-healthcheck-error.yml
deleted file mode 100644
index dca916054efb98dd3fe75605617807ebfc8adb59..0000000000000000000000000000000000000000
--- a/changelogs/unreleased/jc-add-storage-to-healthcheck-error.yml
+++ /dev/null
@@ -1,5 +0,0 @@
----
-title: Add storage name to healthcheck error log
-merge_request: 1934
-author:
-type: added
diff --git a/changelogs/unreleased/jc-default-limit-for-replicate-repository.yml b/changelogs/unreleased/jc-default-limit-for-replicate-repository.yml
deleted file mode 100644
index a89df35826e88ebf53b745ca920822b99a62af88..0000000000000000000000000000000000000000
--- a/changelogs/unreleased/jc-default-limit-for-replicate-repository.yml
+++ /dev/null
@@ -1,5 +0,0 @@
----
-title: Set default concurrency limit for ReplicateRepository
-merge_request: 1822
-author:
-type: other
diff --git a/changelogs/unreleased/jc-faile-on-failed-fetch-internal-remote.yml b/changelogs/unreleased/jc-faile-on-failed-fetch-internal-remote.yml
deleted file mode 100644
index bb0646360d938f1bffdf837ac1ca87dbcb606296..0000000000000000000000000000000000000000
--- a/changelogs/unreleased/jc-faile-on-failed-fetch-internal-remote.yml
+++ /dev/null
@@ -1,5 +0,0 @@
----
-title: ReplicateRepository error when result from FetchInternalRemote is false
-merge_request: 1879
-author:
-type: fixed
diff --git a/changelogs/unreleased/jc-list-repositories.yml b/changelogs/unreleased/jc-list-repositories.yml
deleted file mode 100644
index cac4f8c391edb2935ceccad9e768f2e528bd50be..0000000000000000000000000000000000000000
--- a/changelogs/unreleased/jc-list-repositories.yml
+++ /dev/null
@@ -1,5 +0,0 @@
----
-title: Change ListRepositories RPC to RepostoryReplicas
-merge_request: 1692
-author:
-type: changed
diff --git a/changelogs/unreleased/jc-praefect-test-changes.yml b/changelogs/unreleased/jc-praefect-test-changes.yml
deleted file mode 100644
index f27c2e687e087f7db275548c020bcfa7f3a5cefb..0000000000000000000000000000000000000000
--- a/changelogs/unreleased/jc-praefect-test-changes.yml
+++ /dev/null
@@ -1,5 +0,0 @@
----
-title: Bypass praefect server in tests that check the error message
-merge_request: 1799
-author:
-type: other
diff --git a/changelogs/unreleased/jv-http-analyzer-auth.yml b/changelogs/unreleased/jv-http-analyzer-auth.yml
deleted file mode 100644
index 32c63d5b2fa6eff416d27d686682ca885aca7a4b..0000000000000000000000000000000000000000
--- a/changelogs/unreleased/jv-http-analyzer-auth.yml
+++ /dev/null
@@ -1,5 +0,0 @@
----
-title: Add basic auth support to clone analyzer
-merge_request: 1866
-author:
-type: added
diff --git a/changelogs/unreleased/jv-missing-changelog.yml b/changelogs/unreleased/jv-missing-changelog.yml
deleted file mode 100644
index 42d3267b1c0ff57b527a5669ddbcda9279548db7..0000000000000000000000000000000000000000
--- a/changelogs/unreleased/jv-missing-changelog.yml
+++ /dev/null
@@ -1,5 +0,0 @@
----
-title: Fix expected porcelain output for PushResults
-merge_request: 1862
-author:
-type: fixed
diff --git a/changelogs/unreleased/jv-sql-down-migrations.yml b/changelogs/unreleased/jv-sql-down-migrations.yml
deleted file mode 100644
index ccd3655bfeb24a00e1c72efc25f6a5d26842dd90..0000000000000000000000000000000000000000
--- a/changelogs/unreleased/jv-sql-down-migrations.yml
+++ /dev/null
@@ -1,5 +0,0 @@
----
-title: 'Praefect: add sql-migrate-down subcommand'
-merge_request: 1770
-author:
-type: added
diff --git a/changelogs/unreleased/pa-aline-replication-job-status-type.yml b/changelogs/unreleased/pa-aline-replication-job-status-type.yml
deleted file mode 100644
index 2c03a5a93fe4627eba6f70190acb4ab8a112f056..0000000000000000000000000000000000000000
--- a/changelogs/unreleased/pa-aline-replication-job-status-type.yml
+++ /dev/null
@@ -1,5 +0,0 @@
----
-title: 'Praefect: use enum values for job states'
-merge_request: 1906
-author:
-type: changed
diff --git a/changelogs/unreleased/pks-smarthttp-upload-pack-filter.yml b/changelogs/unreleased/pks-smarthttp-upload-pack-filter.yml
deleted file mode 100644
index 0b5028d43be10f983a97fb705deee34ba5baf2f7..0000000000000000000000000000000000000000
--- a/changelogs/unreleased/pks-smarthttp-upload-pack-filter.yml
+++ /dev/null
@@ -1,5 +0,0 @@
----
-title: Allow filters when advertising refs
-merge_request: 1894
-author:
-type: fixed
diff --git a/changelogs/unreleased/pks-ssh-upload-pack-filter.yml b/changelogs/unreleased/pks-ssh-upload-pack-filter.yml
deleted file mode 100644
index cf47ec014a1200b2d3603a7145ee09959a25f01e..0000000000000000000000000000000000000000
--- a/changelogs/unreleased/pks-ssh-upload-pack-filter.yml
+++ /dev/null
@@ -1,5 +0,0 @@
----
-title: Support partial clones with SSH transports
-merge_request: 1893
-author:
-type: added
diff --git a/changelogs/unreleased/po-list-repos.yml b/changelogs/unreleased/po-list-repos.yml
deleted file mode 100644
index d7e461678423147305d272d9ec0a22494596802a..0000000000000000000000000000000000000000
--- a/changelogs/unreleased/po-list-repos.yml
+++ /dev/null
@@ -1,5 +0,0 @@
----
-title: Internal RPC for walking Gitaly repos
-merge_request: 1855
-author:
-type: added
diff --git a/changelogs/unreleased/po-praefect-correlation-replication.yml b/changelogs/unreleased/po-praefect-correlation-replication.yml
deleted file mode 100644
index 04efcf38e7ae6900561f451f3115797850f9ecb6..0000000000000000000000000000000000000000
--- a/changelogs/unreleased/po-praefect-correlation-replication.yml
+++ /dev/null
@@ -1,5 +0,0 @@
----
-title: Add correlation ID to Praefect replication jobs
-merge_request: 1869
-author:
-type: other
diff --git a/changelogs/unreleased/ps-persistent-queue.yml b/changelogs/unreleased/ps-persistent-queue.yml
deleted file mode 100644
index 48fbe24de55a68c8fcf3c472831a5d91faeb4a68..0000000000000000000000000000000000000000
--- a/changelogs/unreleased/ps-persistent-queue.yml
+++ /dev/null
@@ -1,5 +0,0 @@
----
-title: 'Praefect: Move replication queue to database'
-merge_request: 1865
-author:
-type: added
diff --git a/changelogs/unreleased/ps-proto-lint-decomposition.yml b/changelogs/unreleased/ps-proto-lint-decomposition.yml
deleted file mode 100644
index 03d3ce4a7bec3c1080af87d7d0d26801d2b9671b..0000000000000000000000000000000000000000
--- a/changelogs/unreleased/ps-proto-lint-decomposition.yml
+++ /dev/null
@@ -1,5 +0,0 @@
----
-title: Task proto has dependency to already generated source code.
-merge_request: 1884
-author:
-type: fixed
diff --git a/changelogs/unreleased/ps-remove-old-context-package.yml b/changelogs/unreleased/ps-remove-old-context-package.yml
deleted file mode 100644
index adedff075e594aadd126f7c0f446b0335b190f85..0000000000000000000000000000000000000000
--- a/changelogs/unreleased/ps-remove-old-context-package.yml
+++ /dev/null
@@ -1,5 +0,0 @@
----
-title: Remove dependency on the outdated golang.org/x/net package
-merge_request: 1882
-author:
-type: other
diff --git a/changelogs/unreleased/ps-replication-rename-repository.yml b/changelogs/unreleased/ps-replication-rename-repository.yml
deleted file mode 100644
index fe97d5b83fa6f5ea80e2a6b99c27207b1a598312..0000000000000000000000000000000000000000
--- a/changelogs/unreleased/ps-replication-rename-repository.yml
+++ /dev/null
@@ -1,5 +0,0 @@
----
-title: 'Replication: propagate RenameRepository RPC to Praefect secondaries'
-merge_request: 1853
-author:
-type: changed
diff --git a/changelogs/unreleased/ps-sentry-gitaly-errors-duplication.yml b/changelogs/unreleased/ps-sentry-gitaly-errors-duplication.yml
deleted file mode 100644
index 3c4221a73b2f1542d1f34b9f54144e400a16a47b..0000000000000000000000000000000000000000
--- a/changelogs/unreleased/ps-sentry-gitaly-errors-duplication.yml
+++ /dev/null
@@ -1,5 +0,0 @@
----
-title: Praefect should not emit Gitaly errors to Sentry
-merge_request: 1880
-author:
-type: fixed
diff --git a/changelogs/unreleased/ps-sql-transactions-support.yml b/changelogs/unreleased/ps-sql-transactions-support.yml
deleted file mode 100644
index 1b6b93016231980741a2a6b45315f2e22801e381..0000000000000000000000000000000000000000
--- a/changelogs/unreleased/ps-sql-transactions-support.yml
+++ /dev/null
@@ -1,5 +0,0 @@
----
-title: 'Praefect SQL: support of transactions'
-merge_request: 1815
-author:
-type: added
diff --git a/changelogs/unreleased/ps-verify-storage-locations.yml b/changelogs/unreleased/ps-verify-storage-locations.yml
deleted file mode 100644
index 3d3abec55cd644e41c288a2dc39a3ed2de179bc7..0000000000000000000000000000000000000000
--- a/changelogs/unreleased/ps-verify-storage-locations.yml
+++ /dev/null
@@ -1,5 +0,0 @@
----
-title: Praefect ping-node must verify storage locations are served
-merge_request: 1881
-author:
-type: added
diff --git a/changelogs/unreleased/rs-delete-divergent-refs-option.yml b/changelogs/unreleased/rs-delete-divergent-refs-option.yml
deleted file mode 100644
index 9e4187cae97dffc1cfa64aa05010ceeed6e86c1e..0000000000000000000000000000000000000000
--- a/changelogs/unreleased/rs-delete-divergent-refs-option.yml
+++ /dev/null
@@ -1,5 +0,0 @@
----
-title: Optionally keep divergent refs when mirroring
-merge_request: 1828
-author:
-type: added
diff --git a/changelogs/unreleased/rs-push-results-with-tags.yml b/changelogs/unreleased/rs-push-results-with-tags.yml
deleted file mode 100644
index fce22d3926d59ccfef3cbad1f1abbd4992a76aba..0000000000000000000000000000000000000000
--- a/changelogs/unreleased/rs-push-results-with-tags.yml
+++ /dev/null
@@ -1,5 +0,0 @@
----
-title: Properly account for tags in PushResults
-merge_request: 1874
-author:
-type: fixed
diff --git a/changelogs/unreleased/rs-push-with-porcelain.yml b/changelogs/unreleased/rs-push-with-porcelain.yml
deleted file mode 100644
index 9e45166ba648e7e2a29a9b58c3c3e5e9e8798222..0000000000000000000000000000000000000000
--- a/changelogs/unreleased/rs-push-with-porcelain.yml
+++ /dev/null
@@ -1,5 +0,0 @@
----
-title: Push with the --porcelain flag and parse output of failed pushes
-merge_request: 1845
-author:
-type: added
diff --git a/changelogs/unreleased/sh-enforce-diff-prefix.yml b/changelogs/unreleased/sh-enforce-diff-prefix.yml
deleted file mode 100644
index d068c13956a146fe1bb20041315e25a9b64bdec4..0000000000000000000000000000000000000000
--- a/changelogs/unreleased/sh-enforce-diff-prefix.yml
+++ /dev/null
@@ -1,5 +0,0 @@
----
-title: Enforce diff.noprefix=false for generating Git diffs
-merge_request: 1854
-author:
-type: fixed
diff --git a/changelogs/unreleased/sh-fix-gitaly-ruby-startup.yml b/changelogs/unreleased/sh-fix-gitaly-ruby-startup.yml
deleted file mode 100644
index 2fe9a3dbc19696a0ebf5aa0019f7f83da92c3b64..0000000000000000000000000000000000000000
--- a/changelogs/unreleased/sh-fix-gitaly-ruby-startup.yml
+++ /dev/null
@@ -1,5 +0,0 @@
----
-title: Fix gitaly-ruby not starting on case-sensitive filesystems
-merge_request: 1939
-author:
-type: fixed
diff --git a/changelogs/unreleased/sh-fix-preafect-config-file.yml b/changelogs/unreleased/sh-fix-preafect-config-file.yml
deleted file mode 100644
index e94ff153d0a5c7a50fdc83d2209ec29b348abb03..0000000000000000000000000000000000000000
--- a/changelogs/unreleased/sh-fix-preafect-config-file.yml
+++ /dev/null
@@ -1,5 +0,0 @@
----
-title: Fix example Praefect config file for virtual storage changes
-merge_request: 1856
-author:
-type: other
diff --git a/changelogs/unreleased/sh-simplify-gitaly-require.yml b/changelogs/unreleased/sh-simplify-gitaly-require.yml
deleted file mode 100644
index f39db091cacbc10cd6922f38743ad44e522d0dff..0000000000000000000000000000000000000000
--- a/changelogs/unreleased/sh-simplify-gitaly-require.yml
+++ /dev/null
@@ -1,5 +0,0 @@
----
-title: Simplify loading of required Ruby files
-merge_request: 1942
-author:
-type: other
diff --git a/changelogs/unreleased/sh-update-parser-gem.yml b/changelogs/unreleased/sh-update-parser-gem.yml
deleted file mode 100644
index 3883eb2848209ac796df86d0a79ebea734930fb8..0000000000000000000000000000000000000000
--- a/changelogs/unreleased/sh-update-parser-gem.yml
+++ /dev/null
@@ -1,5 +0,0 @@
----
-title: Upgrade parser gem to v2.7.0.4
-merge_request: 1935
-author:
-type: other
diff --git a/changelogs/unreleased/smh-prevent-path-deletion.yml b/changelogs/unreleased/smh-prevent-path-deletion.yml
deleted file mode 100644
index 7ae7270578360b256da17b9cc7416b6fa7f4ba29..0000000000000000000000000000000000000000
--- a/changelogs/unreleased/smh-prevent-path-deletion.yml
+++ /dev/null
@@ -1,5 +0,0 @@
----
-title: Validate object pool relative paths to prevent path traversal attacks.
-merge_request: 1900
-author:
-type: security
diff --git a/changelogs/unreleased/wc-ambig-ref-linguist.yml b/changelogs/unreleased/wc-ambig-ref-linguist.yml
deleted file mode 100644
index d9e677640a24567bb14e9298af5a87df3eb176de..0000000000000000000000000000000000000000
--- a/changelogs/unreleased/wc-ambig-ref-linguist.yml
+++ /dev/null
@@ -1,5 +0,0 @@
----
-title: Handle ambiguous refs in CommitLanguages
-merge_request: 1829
-author:
-type: fixed
diff --git a/changelogs/unreleased/wc-json-log-time-fmt.yml b/changelogs/unreleased/wc-json-log-time-fmt.yml
deleted file mode 100644
index 34e13471068ae77cb8b8f14868fadadf9029eb75..0000000000000000000000000000000000000000
--- a/changelogs/unreleased/wc-json-log-time-fmt.yml
+++ /dev/null
@@ -1,5 +0,0 @@
----
-title: Use millisecond precision for time in JSON logs
-merge_request:
-author:
-type: changed
diff --git a/changelogs/unreleased/zj-add-changelog.yml b/changelogs/unreleased/zj-add-changelog.yml
deleted file mode 100644
index 4069de01877d54ca21add94739375d7175a719ef..0000000000000000000000000000000000000000
--- a/changelogs/unreleased/zj-add-changelog.yml
+++ /dev/null
@@ -1,5 +0,0 @@
----
-title: Always use V2 tokens in gitaly auth client
-merge_request:
-author:
-type: added
diff --git a/changelogs/unreleased/zj-cert-error-wrap.yml b/changelogs/unreleased/zj-cert-error-wrap.yml
deleted file mode 100644
index 3e7ca9daee5d8214d0cc510610beaf65fba72441..0000000000000000000000000000000000000000
--- a/changelogs/unreleased/zj-cert-error-wrap.yml
+++ /dev/null
@@ -1,5 +0,0 @@
----
-title: Explicit error what type of path can't be read
-merge_request: 1891
-author:
-type: fixed
diff --git a/changelogs/unreleased/zj-remove-user-rebase.yml b/changelogs/unreleased/zj-remove-user-rebase.yml
deleted file mode 100644
index a5d7a46d30ebf7d13d1574a6dedc8e9985818e17..0000000000000000000000000000000000000000
--- a/changelogs/unreleased/zj-remove-user-rebase.yml
+++ /dev/null
@@ -1,5 +0,0 @@
----
-title: Remove deprecated UserRebase RPC
-merge_request: 1851
-author:
-type: changed
diff --git a/changelogs/unreleased/zj-rugged-bare.yml b/changelogs/unreleased/zj-rugged-bare.yml
deleted file mode 100644
index f41ed7646f669010cd124ed9338d3818b1f7787a..0000000000000000000000000000000000000000
--- a/changelogs/unreleased/zj-rugged-bare.yml
+++ /dev/null
@@ -1,5 +0,0 @@
----
-title: 'Use Rugged::Repository#bare over #new'
-merge_request: 1920
-author:
-type: performance
diff --git a/ruby/proto/gitaly/version.rb b/ruby/proto/gitaly/version.rb
index 8e65f1807431809a795b62463ae00096608b8ed4..0d821146833a48c8b6b168d54955a69d7f413536 100644
--- a/ruby/proto/gitaly/version.rb
+++ b/ruby/proto/gitaly/version.rb
@@ -1,5 +1,5 @@
 # This file was auto-generated by release-tools
 #  https://gitlab.com/gitlab-org/release-tools/-/blob/master/lib/release_tools/release/gitaly_release.rb
 module Gitaly
-  VERSION = '12.9.0-rc4'
+  VERSION = '12.9.0'
 end