update CHANGELOG and bump version to 3.4.9