diff --git a/.release-please-manifest.json b/.release-please-manifest.json
index bcd0522..5d02000 100644
--- a/.release-please-manifest.json
+++ b/.release-please-manifest.json
@@ -1,3 +1,3 @@
 {
-  ".": "0.6.0"
+  ".": "0.6.1"
 }
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 53eb65a..2188869 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,5 +1,12 @@
 # Changelog
 
+## [0.6.1](https://github.com/rubykatzen/flightdeck/compare/v0.6.0...v0.6.1) (2026-08-24)
+
+
+### Bug Fixes
+
+* pass GH_TOKEN to deploy-shared.yml's deploy step ([#141](https://github.com/rubykatzen/flightdeck/issues/141)) ([4619a8d](https://github.com/rubykatzen/flightdeck/commit/4619a8d42ee5e55529ab64b588e36794d46f2478))
+
 ## [0.6.0](https://github.com/rubykatzen/flightdeck/compare/v0.5.0...v0.6.0) (2026-08-24)
 
 
diff --git a/README.md b/README.md
index 7e99a13..75d5a29 100644
--- a/README.md
+++ b/README.md
@@ -286,12 +286,12 @@ Builds a zip archive from caller-selected paths, rejects runtime state and env f
 steps:
   - uses: actions/checkout@v7
     with:
-      ref: v0.6.0
-  - uses: rubykatzen/flightdeck/.github/actions/build-bundle@v0.6.0
+      ref: v0.6.1
+  - uses: rubykatzen/flightdeck/.github/actions/build-bundle@v0.6.1
     with:
       paths: apps
       bundle-name: flightdeck-apps.zip
-      release-tag: v0.6.0
+      release-tag: v0.6.1
       token: ${{ secrets.GITHUB_TOKEN }}
 ```
 
@@ -311,10 +311,10 @@ A thin defaults wrapper around `build-bundle`: `paths` defaults to `apps`, `bund
 steps:
   - uses: actions/checkout@v7
     with:
-      ref: v0.6.0
-  - uses: rubykatzen/flightdeck/.github/actions/build-apps-bundle@v0.6.0
+      ref: v0.6.1
+  - uses: rubykatzen/flightdeck/.github/actions/build-apps-bundle@v0.6.1
     with:
-      release-tag: v0.6.0
+      release-tag: v0.6.1
       token: ${{ secrets.GITHUB_TOKEN }}
 ```
 
@@ -337,7 +337,7 @@ Tailscale is optional, not a dependency of this workflow: set `tailscale-oauth-c
 ```yaml
 jobs:
   deploy:
-    uses: rubykatzen/flightdeck/.github/workflows/deploy-shared.yml@v0.6.0
+    uses: rubykatzen/flightdeck/.github/workflows/deploy-shared.yml@v0.6.1
     with:
       hosts: '["deploy@app1.example.com", "deploy@app2.example.com"]'  # required JSON array
       app-refs: '["rubykatzen/flightdeck@latest"]'                   # required non-empty JSON array
@@ -354,7 +354,7 @@ jobs:
 
 <!-- x-release-please-end -->
 
-The `@v0.6.0` pin on the `uses:` line only controls which ref runs `deploy/deploy.py` itself. `app-refs` entries are separate and don't have to match the workflow pin. <!-- x-release-please-version -->
+The `@v0.6.1` pin on the `uses:` line only controls which ref runs `deploy/deploy.py` itself. `app-refs` entries are separate and don't have to match the workflow pin. <!-- x-release-please-version -->
 
 ## License