diff --git a/.release-please-manifest.json b/.release-please-manifest.json
index f1c8ae5..0b9e26a 100644
--- a/.release-please-manifest.json
+++ b/.release-please-manifest.json
@@ -1,3 +1,3 @@
 {
-  ".": "3.9.0"
+  ".": "3.10.0"
 }
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 944cfbe..a943f23 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -2,6 +2,20 @@
 
 All notable changes to the LaunchDarkly client-side JavaScript SDKs will be documented in this file. This project adheres to [Semantic Versioning](http://semver.org).
 
+## [3.10.0](https://github.com/launchdarkly/js-client-sdk/compare/3.9.0...3.10.0) (2026-02-11)
+
+
+### Features
+
+* [SEC-7263] Add dependency-scan GitHub Actions workflow ([e07d652](https://github.com/launchdarkly/js-client-sdk/commit/e07d65267c69c68a34b07d62f3da12aca7393f20))
+* [SEC-7263] Add dependency-scan GitHub Actions workflow ([#328](https://github.com/launchdarkly/js-client-sdk/issues/328)) ([ba690fb](https://github.com/launchdarkly/js-client-sdk/commit/ba690fb87bdf4805171476c75e0d0d7a8a89094e))
+
+
+### Bug Fixes
+
+* use correct pinned SHA for actions/checkout@v4 ([4fd3cb3](https://github.com/launchdarkly/js-client-sdk/commit/4fd3cb302b7923581ac54c46429ee70ef163a9ed))
+* use pinned SHA for actions/checkout instead of version tag ([5e42a0b](https://github.com/launchdarkly/js-client-sdk/commit/5e42a0b69fbf27722b5a1f0edc2ca6b8c0dc070c))
+
 ## [3.9.0](https://github.com/launchdarkly/js-client-sdk/compare/3.8.1...3.9.0) (2025-09-09)
 
 
diff --git a/package.json b/package.json
index 3701134..83d3fc8 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "launchdarkly-js-client-sdk",
-  "version": "3.9.0",
+  "version": "3.10.0",
   "description": "LaunchDarkly SDK for JavaScript",
   "author": "LaunchDarkly <team@launchdarkly.com>",
   "license": "Apache-2.0",