Update CHANGELOG for v4.9.0 (jazzband#472)

Author: felippem

CHANGELOG.md

@@ -1,5 +1,12 @@
 ## Unreleased
 
+## Version 4.9.0
+
+* Remove verify from jwt.decode to follow PyJWT v2.2.0 ([#472](https://github.com/jazzband/djangorestframework-simplejwt/pull/472))
+* Updated import list ([#459](https://github.com/jazzband/djangorestframework-simplejwt/pull/459))
+* Set BLACKLIST_AFTER_ROTATION by default to False at docs ([#455](https://github.com/jazzband/djangorestframework-simplejwt/pull/455))
+* Repair generation of OpenAPI with Spectacular ([#452](https://github.com/jazzband/djangorestframework-simplejwt/pull/452))
+
 ## Version 4.8.0
 
 * Add integration instructions for drf-yasg ([#145](https://github.com/jazzband/djangorestframework-simplejwt/pull/145))