diff --git a/.release-please-manifest.json b/.release-please-manifest.json
index 2e1c40e..76d5538 100644
--- a/.release-please-manifest.json
+++ b/.release-please-manifest.json
@@ -1,3 +1,3 @@
 {
-  ".": "0.8.2"
+  ".": "0.9.0"
 }
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 5608034..eb364d0 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,5 +1,19 @@
 # Changelog
 
+## [0.9.0](https://github.com/vannt-dev/repokeeper/compare/v0.8.2...v0.9.0) (2026-10-13)
+
+
+### Features
+
+* a docker stack that lints Dockerfiles with hadolint ([#66](https://github.com/vannt-dev/repokeeper/issues/66)) ([de665b1](https://github.com/vannt-dev/repokeeper/commit/de665b1c32afe0877cf9e248f2c597cbaeca406a))
+* code scanning with CodeQL, and secret scanning as a setting ([#65](https://github.com/vannt-dev/repokeeper/issues/65)) ([bea1579](https://github.com/vannt-dev/repokeeper/commit/bea15793b45b74c6a4f725316e228fea702db359))
+* open a pull request when the standard has moved ([#62](https://github.com/vannt-dev/repokeeper/issues/62)) ([434c5bd](https://github.com/vannt-dev/repokeeper/commit/434c5bdc7c016da850aa1e3f4e8c5b814b560ce5))
+
+
+### Bug Fixes
+
+* ship the update workflow in the package ([#64](https://github.com/vannt-dev/repokeeper/issues/64)) ([47d4e27](https://github.com/vannt-dev/repokeeper/commit/47d4e2712ff349460dd215f35858677f6adba4d6))
+
 ## [0.8.2](https://github.com/vannt-dev/repokeeper/compare/v0.8.1...v0.8.2) (2026-10-10)
 
 
diff --git a/package-lock.json b/package-lock.json
index d8c248b..17efa46 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -1,12 +1,12 @@
 {
   "name": "repokeeper",
-  "version": "0.8.2",
+  "version": "0.9.0",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "repokeeper",
-      "version": "0.8.2",
+      "version": "0.9.0",
       "license": "MIT",
       "dependencies": {
         "ajv": "^8.20.0",
diff --git a/package.json b/package.json
index 177a47f..742df6f 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "repokeeper",
-  "version": "0.8.2",
+  "version": "0.9.0",
   "description": "Keep every repository on one maintained standard: commits, git hooks, CI, releases, dependency updates and repo settings.",
   "type": "module",
   "bin": {