diff --git a/changelog/v0.10.5.md b/changelog/v0.10.5.md
new file mode 100644
index 0000000..3158531
--- /dev/null
+++ b/changelog/v0.10.5.md
@@ -0,0 +1,15 @@
+# v0.10.5
+
+**Released:** 2026-01-28
+
+## Changes
+
+Fix Kaniko templates to use Woodpecker plugin with destinations format:
+- Switch from raw Kaniko executor to `woodpeckerci/plugin-kaniko`
+- Use `destinations` setting for multi-tag pushes
+- Use `skip-tls-verify` for self-signed registry certs
+- Fix Dockerfile to use `npm install` instead of `npm ci`
+
+---
+
+**Image:** `ghcr.io/orchard9/rdev-api:v0.10.5`
diff --git a/internal/adapter/templates/templates/astro-landing/.woodpecker.yml b/internal/adapter/templates/templates/astro-landing/.woodpecker.yml
index 1741b35..41471d1 100644
--- a/internal/adapter/templates/templates/astro-landing/.woodpecker.yml
+++ b/internal/adapter/templates/templates/astro-landing/.woodpecker.yml
@@ -2,7 +2,7 @@ steps:
   install:
     image: node:20-alpine
     commands:
-      - npm ci
+      - npm install
     when:
       - event: [push, pull_request]
 
@@ -14,16 +14,13 @@ steps:
       - event: [push, pull_request]
 
   docker:
-    image: gcr.io/kaniko-project/executor:debug
-    commands:
-      - >
-        /kaniko/executor
-        --context .
-        --dockerfile Dockerfile
-        --destination zot.orchard9.ai/{{PROJECT_NAME}}:latest
-        --destination zot.orchard9.ai/{{PROJECT_NAME}}:${CI_COMMIT_SHA:0:8}
-        --cache=true
-        --insecure
+    image: woodpeckerci/plugin-kaniko
+    settings:
+      destinations:
+        - zot.orchard9.ai/{{PROJECT_NAME}}:latest
+        - zot.orchard9.ai/{{PROJECT_NAME}}:${CI_COMMIT_SHA:0:8}
+      cache: true
+      skip-tls-verify: true
     when:
       - event: push
         branch: main
diff --git a/internal/adapter/templates/templates/astro-landing/Dockerfile b/internal/adapter/templates/templates/astro-landing/Dockerfile
index a5f7803..b830d38 100644
--- a/internal/adapter/templates/templates/astro-landing/Dockerfile
+++ b/internal/adapter/templates/templates/astro-landing/Dockerfile
@@ -4,7 +4,7 @@ FROM node:20-alpine AS build
 WORKDIR /app
 
 COPY package*.json ./
-RUN npm ci
+RUN npm install
 
 COPY . .
 RUN npm run build
diff --git a/internal/adapter/templates/templates/default/.woodpecker.yml b/internal/adapter/templates/templates/default/.woodpecker.yml
index 9660680..d3b7211 100644
--- a/internal/adapter/templates/templates/default/.woodpecker.yml
+++ b/internal/adapter/templates/templates/default/.woodpecker.yml
@@ -1,15 +1,12 @@
 steps:
   docker:
-    image: gcr.io/kaniko-project/executor:debug
-    commands:
-      - >
-        /kaniko/executor
-        --context .
-        --dockerfile Dockerfile
-        --destination zot.orchard9.ai/{{PROJECT_NAME}}:latest
-        --destination zot.orchard9.ai/{{PROJECT_NAME}}:${CI_COMMIT_SHA:0:8}
-        --cache=true
-        --insecure
+    image: woodpeckerci/plugin-kaniko
+    settings:
+      destinations:
+        - zot.orchard9.ai/{{PROJECT_NAME}}:latest
+        - zot.orchard9.ai/{{PROJECT_NAME}}:${CI_COMMIT_SHA:0:8}
+      cache: true
+      skip-tls-verify: true
     when:
       - event: push
         branch: main
diff --git a/internal/adapter/templates/templates/go-api/.woodpecker.yml b/internal/adapter/templates/templates/go-api/.woodpecker.yml
index 47af64e..92f8a5f 100644
--- a/internal/adapter/templates/templates/go-api/.woodpecker.yml
+++ b/internal/adapter/templates/templates/go-api/.woodpecker.yml
@@ -14,16 +14,13 @@ steps:
       - event: [push, pull_request]
 
   docker:
-    image: gcr.io/kaniko-project/executor:debug
-    commands:
-      - >
-        /kaniko/executor
-        --context .
-        --dockerfile Dockerfile
-        --destination zot.orchard9.ai/{{PROJECT_NAME}}:latest
-        --destination zot.orchard9.ai/{{PROJECT_NAME}}:${CI_COMMIT_SHA:0:8}
-        --cache=true
-        --insecure
+    image: woodpeckerci/plugin-kaniko
+    settings:
+      destinations:
+        - zot.orchard9.ai/{{PROJECT_NAME}}:latest
+        - zot.orchard9.ai/{{PROJECT_NAME}}:${CI_COMMIT_SHA:0:8}
+      cache: true
+      skip-tls-verify: true
     when:
       - event: push
         branch: main