diff --git a/.release-please-manifest.json b/.release-please-manifest.json
index 76d5538..7d9b009 100644
--- a/.release-please-manifest.json
+++ b/.release-please-manifest.json
@@ -1,3 +1,3 @@
 {
-  ".": "0.9.0"
+  ".": "0.10.0"
 }
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 937ac0f..79b9152 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,5 +1,12 @@
 # Changelog
 
+## [0.10.0](https://github.com/rubykatzen/flightdeck/compare/v0.9.0...v0.10.0) (2026-08-25)
+
+
+### Features
+
+* make a vault manifest's env: optional ([#158](https://github.com/rubykatzen/flightdeck/issues/158)) ([04b33ff](https://github.com/rubykatzen/flightdeck/commit/04b33ff12d1cfb228bf5481360b97cbc246d1815))
+
 ## [0.9.0](https://github.com/rubykatzen/flightdeck/compare/v0.8.0...v0.9.0) (2026-08-24)
 
 
diff --git a/README.md b/README.md
index d01bb74..4c24b6d 100644
--- a/README.md
+++ b/README.md
@@ -293,12 +293,12 @@ Builds a zip archive from caller-selected paths, rejects runtime state and env f
 steps:
   - uses: actions/checkout@v7
     with:
-      ref: v0.9.0
-  - uses: rubykatzen/flightdeck/.github/actions/build-bundle@v0.9.0
+      ref: v0.10.0
+  - uses: rubykatzen/flightdeck/.github/actions/build-bundle@v0.10.0
     with:
       paths: apps
       bundle-name: flightdeck-apps.zip
-      release-tag: v0.9.0
+      release-tag: v0.10.0
       token: ${{ secrets.GITHUB_TOKEN }}
 ```
 
@@ -318,10 +318,10 @@ A thin defaults wrapper around `build-bundle`: `paths` defaults to `apps`, `bund
 steps:
   - uses: actions/checkout@v7
     with:
-      ref: v0.9.0
-  - uses: rubykatzen/flightdeck/.github/actions/build-apps-bundle@v0.9.0
+      ref: v0.10.0
+  - uses: rubykatzen/flightdeck/.github/actions/build-apps-bundle@v0.10.0
     with:
-      release-tag: v0.9.0
+      release-tag: v0.10.0
       token: ${{ secrets.GITHUB_TOKEN }}
 ```
 
@@ -344,7 +344,7 @@ Tailscale is optional, not a dependency of this workflow: set `tailscale-oauth-c
 ```yaml
 jobs:
   deploy:
-    uses: rubykatzen/flightdeck/.github/workflows/deploy-shared.yml@v0.9.0
+    uses: rubykatzen/flightdeck/.github/workflows/deploy-shared.yml@v0.10.0
     with:
       hosts: '["deploy@app1.example.com", "deploy@app2.example.com"]'  # required JSON array
       app-refs: '["rubykatzen/flightdeck@latest"]'                   # required non-empty JSON array
@@ -361,7 +361,7 @@ jobs:
 
 <!-- x-release-please-end -->
 
-The `@v0.9.0` pin on the `uses:` line only controls which ref runs `deploy/deploy.py` itself. `app-refs` entries are separate and don't have to match the workflow pin. <!-- x-release-please-version -->
+The `@v0.10.0` pin on the `uses:` line only controls which ref runs `deploy/deploy.py` itself. `app-refs` entries are separate and don't have to match the workflow pin. <!-- x-release-please-version -->
 
 ## License