From bd8e22ea5d66b46d26f42825056804f8d1eb2872 Mon Sep 17 00:00:00 2001
From: Marc Villain <marc.villain@epita.fr>
Date: Fri, 6 Nov 2026 14:23:45 +0100
Subject: [PATCH] release: 1.0.2

---
 CHANGELOG.md | 6 ++++++
 package.json | 2 +-
 2 files changed, 7 insertions(+), 1 deletion(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index e04c50b..5c3c656 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,6 +3,12 @@
 The package version is the pgmorbac extension version it ships. Extension
 changes are in the [pgmorbac changelog](https://github.com/crudylabs/pgmorbac/blob/master/CHANGELOG.md).
 
+## [1.0.2] - 2026-11-06
+
+Ships pgmorbac 1.0.2: `is_allowed()` and `is_allowed_nocache()` answer FALSE
+for a NULL user instead of failing on `auth_cache`, and `upgradeScripts()` now
+includes `pgmorbac--1.0.1--1.0.2.sql`.
+
 ## [1.0.1] - 2026-10-14
 
 Ships pgmorbac 1.0.1: `is_allowed_nocache()` no longer resolves roles once per
diff --git a/package.json b/package.json
index 42a6dbd..7f897a2 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@crudy/pgmorbac",
-  "version": "1.0.1",
+  "version": "1.0.2",
   "type": "module",
   "description": "Multi-OrBAC for PostgreSQL: the pgmorbac extension SQL from each signed release, for Node.js projects and migration runners",
   "keywords": [