diff --git a/changelog/v0.9.4.md b/changelog/v0.9.4.md
new file mode 100644
index 0000000..affbd92
--- /dev/null
+++ b/changelog/v0.9.4.md
@@ -0,0 +1,11 @@
+# v0.9.4
+
+**Released:** 2026-01-27
+
+## Changes
+
+Fix project creation: empty repo seeding and Woodpecker sync retry
+
+---
+
+**Image:** `ghcr.io/orchard9/rdev-api:v0.9.4`
diff --git a/deployments/k8s/base/rdev-api.yaml b/deployments/k8s/base/rdev-api.yaml
index 884d620..61756f1 100644
--- a/deployments/k8s/base/rdev-api.yaml
+++ b/deployments/k8s/base/rdev-api.yaml
@@ -24,7 +24,7 @@ spec:
       serviceAccountName: rdev-api
       containers:
         - name: rdev-api
-          image: ghcr.io/orchard9/rdev-api:v0.7.2
+          image: ghcr.io/orchard9/rdev-api:v0.9.4
           imagePullPolicy: Always
 
           ports:
@@ -73,7 +73,7 @@ spec:
             - name: DB_PORT
               value: "5432"
             - name: DB_USER
-              value: "appuser"
+              value: "rdev"
             - name: DB_NAME
               value: "rdev"
             - name: DB_SSL_MODE
@@ -114,6 +114,13 @@ spec:
                 secretKeyRef:
                   name: rdev-credentials
                   key: WOODPECKER_WEBHOOK_SECRET
+            - name: WOODPECKER_URL
+              value: "https://ci.threesix.ai"
+            - name: WOODPECKER_API_TOKEN
+              valueFrom:
+                secretKeyRef:
+                  name: rdev-credentials
+                  key: WOODPECKER_API_TOKEN
 
       imagePullSecrets:
         - name: ghcr-secret