diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 6382271..7c1fbee 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -10,11 +10,17 @@ env:
 jobs:
   lint:
     uses: NicTool/.github/.github/workflows/lint.yml@main
+    permissions:
+      contents: read
 
   coverage:
     uses: NicTool/.github/.github/workflows/coverage.yml@main
     secrets: inherit
+    permissions:
+      contents: read
 
   test:
     uses: NicTool/.github/.github/workflows/test.yml@main
     secrets: inherit
+    permissions:
+      contents: read
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
deleted file mode 100644
index 46e21d1..0000000
--- a/.github/workflows/codeql.yml
+++ /dev/null
@@ -1,14 +0,0 @@
-name: CodeQL
-
-on:
-  push:
-    branches: [main]
-  pull_request:
-    # The branches below must be a subset of the branches above
-    branches: [main]
-  schedule:
-    - cron: '18 7 * * 4'
-
-jobs:
-  codeql:
-    uses: NicTool/.github/.github/workflows/codeql.yml@main
diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index 7a266d6..10e1cfa 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -11,3 +11,7 @@ jobs:
   publish:
     uses: NicTool/.github/.github/workflows/publish.yml@main
     secrets: inherit
+    permissions:
+      contents: read
+      packages: write
+      id-token: write
diff --git a/.release b/.release
index 6ad30e5..a6911a9 160000
--- a/.release
+++ b/.release
@@ -1 +1 @@
-Subproject commit 6ad30e5df5fc026b332bbae7a0a4dfd47baf5898
+Subproject commit a6911a90f1b15486fb319d844341421c78035b2a
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 736616c..71dddfd 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -6,6 +6,10 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/).
 
 ### Unreleased
 
+### [0.8.10] - 2026-04-13
+
+
+
 ### [0.8.9] - 2026-03-29
 
 - group: GET can return one group or array
@@ -128,3 +132,4 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/).
 [0.8.7]: https://github.com/NicTool/validate/releases/tag/v0.8.7
 [0.8.8]: https://github.com/NicTool/validate/releases/tag/v0.8.8
 [0.8.9]: https://github.com/NicTool/validate/releases/tag/v0.8.9
+[0.8.10]: https://github.com/NicTool/validate/releases/tag/v0.8.10
diff --git a/CONTRIBUTORS.md b/CONTRIBUTORS.md
index 6fd2b97..549c44c 100644
--- a/CONTRIBUTORS.md
+++ b/CONTRIBUTORS.md
@@ -2,8 +2,8 @@
 
 This handcrafted artisanal software is brought to you by:
 
-| <img height="80" src="https://avatars.githubusercontent.com/u/261635?v=4"><br><a href="https://github.com/msimerson">msimerson</a> (<a href="https://github.com/NicTool/validate/commits?author=msimerson">28</a>) |
-| :----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------: |
+| <img height="80" src="https://avatars.githubusercontent.com/u/261635?v=4"><br><a href="https://github.com/msimerson">msimerson</a> (<a href="https://github.com/NicTool/validate/commits?author=msimerson">29</a>)|
+| :---: |
 
 <sub>this file is generated by [.release](https://github.com/msimerson/.release).
 Contribute to this project to get your GitHub profile included here.</sub>
diff --git a/lib/test/user.json b/lib/test/user.json
index 77c8399..dbdb745 100644
--- a/lib/test/user.json
+++ b/lib/test/user.json
@@ -4,6 +4,6 @@
   "password": "(t0ps3kREt)",
   "email": "matt@example.com",
   "first_name": "Matt",
-  "last_name": "Simerson",
+  "last_name": "Testerson",
   "deleted": false
 }
diff --git a/package.json b/package.json
index 20ac64c..9bef9b4 100644
--- a/package.json
+++ b/package.json
@@ -48,13 +48,13 @@
   },
   "homepage": "https://github.com/NicTool/validate#readme",
   "devDependencies": {
-    "eslint": "^10.1.0",
+    "eslint": "^10.2.0",
     "@eslint/js": "^10.0.1",
     "eslint-config-prettier": "^10.1.8",
-    "globals": "^17.4.0"
+    "globals": "^17.5.0"
   },
   "dependencies": {
-    "joi": "^18.1.1",
+    "joi": "^18.1.2",
     "joi-password": "^4.3.0"
   },
   "prettier": {
@@ -63,4 +63,4 @@
     "trailingComma": "all",
     "printWidth": 100
   }
-}
+}
\ No newline at end of file
diff --git a/test/fixtures/v2/user.json b/test/fixtures/v2/user.json
index 6c8e002..ea94d59 100644
--- a/test/fixtures/v2/user.json
+++ b/test/fixtures/v2/user.json
@@ -3,5 +3,5 @@
   "password": "(t0ps3kREt)",
   "email": "matt@example.com",
   "first_name": "Matt",
-  "last_name": "Simerson"
+  "last_name": "Testerson"
 }