Meta: Adding changelog and version update for 25.09.1

diff --git a/.version b/.version
index 834db75c..739af04d 100644
--- a/.version
+++ b/.version
@@ -1 +1 @@
-25.09
+25.09.1
diff --git a/CHANGELOG.md b/CHANGELOG.md
index e6d76b4d..92a2bd55 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,6 +3,44 @@
 All notable changes to this project will be documented in this file.
 
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/).
+## [25.09.1] - 2025-10-15: "Hot Wallet Guardian II"
+
+Several important fixes, please upgrade!
+
+### Added
+
+ - added verification of GPG keys for the bitcoin and litecoin tarballs. ([#8429])
+
+### Changed
+
+ - lightningd: we defer deletion of old htlcs on channel close, to avoid pausing for a long time (we clean them on startup) ([#8563])
+ - gossipd: add gossip_store recovery for filesystems which do not synchronize read and write (e.g. ZFS on Linux), by disabling mmap reads and rewriting the last records. ([#8566])
+ - Dockerfile: improve build time and reduce image size ([#8429])
+
+### Fixed
+
+ - JSON-RPC: `listchainmoves` could contain bogus duplicate entries after 25.09 bookkeeper migration. ([#8574])
+ - bookkeeper: failed reload of rebalances on restart. ([#8562])
+ - fixed compilation on all target architectures; each had their own bugs (poetry, missing packages...). ([#8429])
+ - fixed cargo cross compilation. it was mistakenly using QEMU before. ([#8429])
+ - fixed CPU compatibility bug described in issue 8456 ([#8429])
+ - lightningd: potential crash when we receive a malformed onion complain from our first peer when using sendonion / injectpaymentonion. ([#8597])
+ - db: migration from v25.09 on a reasonable size account database could take almost infinite time. ([#8587])
+ - pyln-testing: restore compatibility with pre-25.09 CLN versions. ([#8539])
+ - build: we now build on MacOS without errors on the latest Command Line Tools (macOS 15 SDK). ([#8599])
+ - build: fix build with -O2 on 32 bit arm (armhf). ([#8599])
+
+[#8563]: https://github.com/ElementsProject/lightning/pull/8563
+[#8562]: https://github.com/ElementsProject/lightning/pull/8562
+[#8574]: https://github.com/ElementsProject/lightning/pull/8574
+[#8429]: https://github.com/ElementsProject/lightning/pull/8429
+[#8566]: https://github.com/ElementsProject/lightning/pull/8566
+[#8587]: https://github.com/ElementsProject/lightning/pull/8587
+[#8597]: https://github.com/ElementsProject/lightning/pull/8597
+[#8539]: https://github.com/ElementsProject/lightning/pull/8539
+[#8599]: https://github.com/ElementsProject/lightning/pull/8599
+[25.09.1]: https://github.com/ElementsProject/lightning/releases/tag/v25.09.1
+
 ## [25.09] - 2025-09-01: "Hot Wallet Guardian"
 
 This release named by @king-11.
diff --git a/contrib/pyln-client/pyln/client/__init__.py b/contrib/pyln-client/pyln/client/__init__.py
index c892ddf1..1e880b79 100644
--- a/contrib/pyln-client/pyln/client/__init__.py
+++ b/contrib/pyln-client/pyln/client/__init__.py
@@ -4,7 +4,7 @@ from .gossmap import Gossmap, GossmapNode, GossmapChannel, GossmapHalfchannel, G
 from .gossmapstats import GossmapStats
 from .version import NodeVersion
 
-__version__ = "25.09"
+__version__ = "25.09.1"
 
 __all__ = [
     "LightningRpc",
diff --git a/contrib/pyln-client/pyproject.toml b/contrib/pyln-client/pyproject.toml
index 1639ff3c..c29e497d 100644
--- a/contrib/pyln-client/pyproject.toml
+++ b/contrib/pyln-client/pyproject.toml
@@ -1,6 +1,6 @@
 [project]
 name = "pyln-client"
-version = "25.09"
+version = "25.09.1"
 description = "Client library and plugin library for Core Lightning"
 authors = [{ name = "Christian Decker", email = "decker.christian@gmail.com" }]
 license = { text = "BSD-MIT" }
diff --git a/contrib/pyln-proto/pyln/proto/__init__.py b/contrib/pyln-proto/pyln/proto/__init__.py
index cd83c997..7a5462ef 100644
--- a/contrib/pyln-proto/pyln/proto/__init__.py
+++ b/contrib/pyln-proto/pyln/proto/__init__.py
@@ -4,7 +4,7 @@ from .invoice import Invoice
 from .onion import OnionPayload, TlvPayload, LegacyOnionPayload
 from .wire import LightningConnection, LightningServerSocket
 
-__version__ = "25.09"
+__version__ = "25.09.1"
 
 __all__ = [
     "Invoice",
diff --git a/contrib/pyln-proto/pyproject.toml b/contrib/pyln-proto/pyproject.toml
index a3b38888..d2f59782 100644
--- a/contrib/pyln-proto/pyproject.toml
+++ b/contrib/pyln-proto/pyproject.toml
@@ -1,6 +1,6 @@
 [project]
 name = "pyln-proto"
-version = "25.09"
+version = "25.09.1"
 description = "This package implements some of the Lightning Network protocol in pure python. It is intended for protocol testing and some minor tooling only. It is not deemed secure enough to handle any amount of real funds (you have been warned!)."
 authors = [
     {name = "Christian Decker", email = "decker.christian@gmail.com"}
diff --git a/contrib/pyln-testing/pyln/testing/__init__.py b/contrib/pyln-testing/pyln/testing/__init__.py
index ac1f7b60..ebfcdf4e 100644
--- a/contrib/pyln-testing/pyln/testing/__init__.py
+++ b/contrib/pyln-testing/pyln/testing/__init__.py
@@ -1,4 +1,4 @@
-__version__ = "25.09"
+__version__ = "25.09.1"
 
 __all__ = [
     "__version__",
diff --git a/contrib/pyln-testing/pyproject.toml b/contrib/pyln-testing/pyproject.toml
index d402d8a3..35870351 100644
--- a/contrib/pyln-testing/pyproject.toml
+++ b/contrib/pyln-testing/pyproject.toml
@@ -1,6 +1,6 @@
 [project]
 name = "pyln-testing"
-version = "25.09"
+version = "25.09.1"
 description = "Test your Core Lightning integration, plugins or whatever you want"
 authors = [{ name = "Christian Decker", email = "decker.christian@gmail.com" }]
 license = { text = "BSD-MIT" }
diff --git a/tools/reckless b/tools/reckless
index 2bfb68bd..33ef0fa2 100755
--- a/tools/reckless
+++ b/tools/reckless
@@ -21,7 +21,7 @@ from urllib.error import HTTPError
 import venv
 
 
-__VERSION__ = '25.09'
+__VERSION__ = '25.09.1'
 
 logging.basicConfig(
     level=logging.INFO,
diff --git a/uv.lock b/uv.lock
index c327e8ae..40632bb6 100644
--- a/uv.lock
+++ b/uv.lock
@@ -1342,7 +1342,7 @@ dev = [{ name = "pyln-proto", editable = "contrib/pyln-proto" }]
 
 [[package]]
 name = "pyln-client"
-version = "25.9"
+version = "25.9.1"
 source = { editable = "contrib/pyln-client" }
 dependencies = [
     { name = "pyln-bolt7" },
@@ -1400,7 +1400,7 @@ dev = [
 
 [[package]]
 name = "pyln-proto"
-version = "25.9"
+version = "25.9.1"
 source = { editable = "contrib/pyln-proto" }
 dependencies = [
     { name = "base58" },
@@ -1429,7 +1429,7 @@ dev = [{ name = "pytest", specifier = ">=8.0.0" }]
 
 [[package]]
 name = "pyln-testing"
-version = "25.9"
+version = "25.9.1"
 source = { editable = "contrib/pyln-testing" }
 dependencies = [
     { name = "cheroot" },