This release is available as a Docker Image on Docker Hub at offchainlabs/nitro-node:v3.9.5-rc.1-1a373a
This Docker image specifies default flags in its entrypoint which should be replicated if you're overriding the entrypoint: /usr/local/bin/nitro --validation.wasm.allowed-wasm-module-roots /home/user/nitro-legacy/machines,/home/user/target/machines
Important for any chains still on ArbOS40: If you're running a validator without a split validation server (this will be true of most validators), you should instead use the image offchainlabs/nitro-node:v3.9.5-rc.1-1a373a-validator which has the extra script /usr/local/bin/split-val-entry.sh as the entrypoint (no need to override the default entrypoint).
Internal Highlights
Full Changelog: v3.9.4...v3.9.5-rc.1