diff --git a/.changeset/fix-236-scope-fallback.md b/.changeset/fix-236-scope-fallback.md
deleted file mode 100644
index 9942489d..00000000
--- a/.changeset/fix-236-scope-fallback.md
+++ /dev/null
@@ -1,5 +0,0 @@
----
-"@googleworkspace/cli": patch
----
-
-fix(auth): dynamically fetch scopes from Discovery docs when `-s` specifies services not in static scope lists
diff --git a/.changeset/fix-246-fmt-dedup.md b/.changeset/fix-246-fmt-dedup.md
deleted file mode 100644
index f96d0a37..00000000
--- a/.changeset/fix-246-fmt-dedup.md
+++ /dev/null
@@ -1,5 +0,0 @@
----
-"@googleworkspace/cli": patch
----
-
-fix(auth): format extract_scopes_from_doc and deduplicate dynamic scopes
diff --git a/.changeset/fix-forward-threading.md b/.changeset/fix-forward-threading.md
deleted file mode 100644
index 9df55b1f..00000000
--- a/.changeset/fix-forward-threading.md
+++ /dev/null
@@ -1,5 +0,0 @@
----
-"@googleworkspace/cli": patch
----
-
-Bring `+forward` behavior in line with Gmail's web UI: keep the forward in the sender's original thread, add a blank line between the forwarded message metadata and body, and remove the spurious closing delimiter.
diff --git a/.changeset/fix-gmail-triage-scope.md b/.changeset/fix-gmail-triage-scope.md
deleted file mode 100644
index c14c6287..00000000
--- a/.changeset/fix-gmail-triage-scope.md
+++ /dev/null
@@ -1,5 +0,0 @@
----
-"@googleworkspace/cli": patch
----
-
-Fix gmail +triage 403 error by using gmail.readonly scope instead of gmail.modify to avoid conflict with gmail.metadata scope that does not support the q parameter
diff --git a/.changeset/fix-keyring-fallback.md b/.changeset/fix-keyring-fallback.md
deleted file mode 100644
index 2562dd1f..00000000
--- a/.changeset/fix-keyring-fallback.md
+++ /dev/null
@@ -1,5 +0,0 @@
----
-"@googleworkspace/cli": minor
----
-
-Add `GOOGLE_WORKSPACE_CLI_KEYRING_BACKEND` env var for explicit keyring backend selection (`keyring` or `file`). Fixes credential key loss in Docker/keyring-less environments by never deleting `.encryption_key` and always persisting it as a fallback.
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 9932d1bb..7fec35d1 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,5 +1,18 @@
 # @googleworkspace/cli
 
+## 0.10.0
+
+### Minor Changes
+
+- 8d89325: Add `GOOGLE_WORKSPACE_CLI_KEYRING_BACKEND` env var for explicit keyring backend selection (`keyring` or `file`). Fixes credential key loss in Docker/keyring-less environments by never deleting `.encryption_key` and always persisting it as a fallback.
+
+### Patch Changes
+
+- 06aa698: fix(auth): dynamically fetch scopes from Discovery docs when `-s` specifies services not in static scope lists
+- 06aa698: fix(auth): format extract_scopes_from_doc and deduplicate dynamic scopes
+- 5e7d120: Bring `+forward` behavior in line with Gmail's web UI: keep the forward in the sender's original thread, add a blank line between the forwarded message metadata and body, and remove the spurious closing delimiter.
+- 2782cf1: Fix gmail +triage 403 error by using gmail.readonly scope instead of gmail.modify to avoid conflict with gmail.metadata scope that does not support the q parameter
+
 ## 0.9.1
 
 ### Patch Changes
diff --git a/Cargo.lock b/Cargo.lock
index e40df1cb..362f8e89 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -845,7 +845,7 @@ dependencies = [
 
 [[package]]
 name = "gws"
-version = "0.9.1"
+version = "0.10.0"
 dependencies = [
  "aes-gcm",
  "anyhow",
@@ -2150,9 +2150,9 @@ dependencies = [
 
 [[package]]
 name = "schannel"
-version = "0.1.28"
+version = "0.1.29"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "891d81b926048e76efe18581bf793546b4c0eaf8448d72be8de2bbee5fd166e1"
+checksum = "91c1b7e4904c873ef0710c1f407dde2e6287de2bebc1bbbf7d430bb7cbffd939"
 dependencies = [
  "windows-sys 0.61.2",
 ]
diff --git a/Cargo.toml b/Cargo.toml
index 5babca80..5376c529 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -14,7 +14,7 @@
 
 [package]
 name = "gws"
-version = "0.9.1"
+version = "0.10.0"
 edition = "2021"
 description = "Google Workspace CLI — dynamic command surface from Discovery Service"
 license = "Apache-2.0"
diff --git a/package.json b/package.json
index 31bf3f02..3cc39bf8 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@googleworkspace/cli",
-  "version": "0.9.1",
+  "version": "0.10.0",
   "private": true,
   "description": "Google Workspace CLI — dynamic command surface from Discovery Service",
   "license": "Apache-2.0",