diff --git a/CHANGELOG.md b/CHANGELOG.md
index d2281f4..cc4eea1 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,5 +1,12 @@
 # Changelog
 
+## Changes 4/7/2025 v1.0.9
+
+- TOTP one time recovery code added
+- fix(security): mitigate CodeQL alerts by adding SRI attributes and sanitizing DOM content
+
+---
+
 ## Changes 4/6/2025 v1.0.8
 
 **May need to log out and log back in if using remember me**  
diff --git a/js/authModals.js b/js/authModals.js
index 350d249..7c6e940 100644
--- a/js/authModals.js
+++ b/js/authModals.js
@@ -1,7 +1,7 @@
 import { showToast, toggleVisibility, attachEnterKeyListener } from './domUtils.js';
 import { sendRequest } from './networkUtils.js';
 
-const version = "v1.0.8";
+const version = "v1.0.9";
 const adminTitle = `Admin Panel <small style="font-size: 12px; color: gray;">${version}</small>`;
 
 let lastLoginData = null;