diff --git a/.changeset/fix-encryption-key-file-leak.md b/.changeset/fix-encryption-key-file-leak.md
deleted file mode 100644
index 0914ad39..00000000
--- a/.changeset/fix-encryption-key-file-leak.md
+++ /dev/null
@@ -1,5 +0,0 @@
----
-"@googleworkspace/cli": patch
----
-
-Stop persisting encryption key to `.encryption_key` file when OS keyring is available. Existing file-based keys are migrated into the keyring and the file is removed on next CLI invocation.
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 7d54c71e..9932d1bb 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,5 +1,11 @@
 # @googleworkspace/cli
 
+## 0.9.1
+
+### Patch Changes
+
+- 5872dbe: Stop persisting encryption key to `.encryption_key` file when OS keyring is available. Existing file-based keys are migrated into the keyring and the file is removed on next CLI invocation.
+
 ## 0.9.0
 
 ### Minor Changes
diff --git a/Cargo.lock b/Cargo.lock
index 670c1b43..499c612f 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -845,7 +845,7 @@ dependencies = [
 
 [[package]]
 name = "gws"
-version = "0.9.0"
+version = "0.9.1"
 dependencies = [
  "aes-gcm",
  "anyhow",
diff --git a/Cargo.toml b/Cargo.toml
index 8a212ba6..a78379dd 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -14,7 +14,7 @@
 
 [package]
 name = "gws"
-version = "0.9.0"
+version = "0.9.1"
 edition = "2021"
 description = "Google Workspace CLI — dynamic command surface from Discovery Service"
 license = "Apache-2.0"
diff --git a/flake.lock b/flake.lock
index 33aa5a66..38483124 100644
--- a/flake.lock
+++ b/flake.lock
@@ -20,11 +20,11 @@
     },
     "nixpkgs": {
       "locked": {
-        "lastModified": 1772773019,
-        "narHash": "sha256-E1bxHxNKfDoQUuvriG71+f+s/NT0qWkImXsYZNFFfCs=",
+        "lastModified": 1772963539,
+        "narHash": "sha256-9jVDGZnvCckTGdYT53d/EfznygLskyLQXYwJLKMPsZs=",
         "owner": "NixOS",
         "repo": "nixpkgs",
-        "rev": "aca4d95fce4914b3892661bcb80b8087293536c6",
+        "rev": "9dcb002ca1690658be4a04645215baea8b95f31d",
         "type": "github"
       },
       "original": {
diff --git a/package.json b/package.json
index 84315826..31bf3f02 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@googleworkspace/cli",
-  "version": "0.9.0",
+  "version": "0.9.1",
   "private": true,
   "description": "Google Workspace CLI — dynamic command surface from Discovery Service",
   "license": "Apache-2.0",