diff --git a/composer-bash-completion b/composer-bash-completion
index f24f512..e534faf 100644
--- a/composer-bash-completion
+++ b/composer-bash-completion
@@ -22,7 +22,7 @@ _sf_composer() {
     local cur prev words cword
     _get_comp_words_by_ref -n := cur prev words cword
 
-    local completecmd=("$sf_cmd" "_complete" "-sbash" "-c$cword" "-S2.3.8")
+    local completecmd=("$sf_cmd" "_complete" "-sbash" "-c$cword" "-S2.3.9")
     for w in ${words[@]}; do
         w=$(printf -- '%b' "$w")
         # remove quotes from typed values
diff --git a/composer.spec b/composer.spec
index a100a10..58cebcb 100644
--- a/composer.spec
+++ b/composer.spec
@@ -18,7 +18,7 @@
 %bcond_with          syslib
 %endif
 
-%global gh_commit    f69e63262dadd02b3b6edade339c7badda2939c2
+%global gh_commit    015f524c9969255a29cdea8890cbd4fec240ee47
 %global gh_short     %(c=%{gh_commit}; echo ${c:0:7})
 %global gh_branch    2.0-dev
 %global gh_owner     composer
@@ -26,7 +26,7 @@
 %global api_version  2.3.0
 %global run_version  2.2.2
 
-%global upstream_version 2.3.8
+%global upstream_version 2.3.9
 #global upstream_prever  RC2
 #global upstream_lower   rc2
 
@@ -392,6 +392,9 @@ exit $ret
 
 
 %changelog
+* Tue Jul  5 2022 Remi Collet <remi@remirepo.net> - 2.3.9-1
+- update to 2.3.9
+
 * Fri Jul  1 2022 Remi Collet <remi@remirepo.net> - 2.3.8-1
 - update to 2.3.8
 - add bash completion file (for upcoming 2.4)
diff --git a/sources b/sources
index bcadacc..1cd526d 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (composer-2.3.8-f69e632.tgz) = 1a06aecceb68863b283fd2d8cb9f0e85702c491b0ac7719ef36f4b12a7040c4f92506d2414f6ff7a38d14120f7ff06ae871d57676623ba86f20d9b377f4dd828
+SHA512 (composer-2.3.9-015f524.tgz) = ecbbdf518326c512ceef1649374ab99b609e461a1dee140474615d4efd523bb77d0eed0b52af22bc666356a8c399e2350d015a31ebe8fb6ab7271bce40fe7c16