diff --git a/changelog/v0.10.9.md b/changelog/v0.10.9.md
new file mode 100644
index 0000000..41d10a7
--- /dev/null
+++ b/changelog/v0.10.9.md
@@ -0,0 +1,11 @@
+# v0.10.9
+
+**Released:** 2026-01-29
+
+## Changes
+
+Fix TLS: use cluster-issuer for project deploys
+
+---
+
+**Image:** `ghcr.io/orchard9/rdev-api:v0.10.9`
diff --git a/deployments/k8s/base/rdev-api.yaml b/deployments/k8s/base/rdev-api.yaml
index 88f39d0..b9146c2 100644
--- a/deployments/k8s/base/rdev-api.yaml
+++ b/deployments/k8s/base/rdev-api.yaml
@@ -24,7 +24,7 @@ spec:
       serviceAccountName: rdev-api
       containers:
         - name: rdev-api
-          image: ghcr.io/orchard9/rdev-api:v0.10.8
+          image: ghcr.io/orchard9/rdev-api:v0.10.9
           imagePullPolicy: Always
 
           ports: