release: 1.0.2

.github/workflows/publish.yml

@@ -21,7 +21,7 @@ jobs:
   publish:
     runs-on: ubuntu-latest
     env:
-      NODE_VERSION: v24.12.0
+      NODE_VERSION: v24.22.2
     steps:
       - name: Check out the tag
         run: |

CHANGELOG.md

@@ -3,6 +3,12 @@
 The package version is the pgmorbac extension version it ships. Extension
 changes are in the [pgmorbac changelog](https://github.com/crudylabs/pgmorbac/blob/master/CHANGELOG.md).
 
+## [1.0.2] - 2026-11-06
+
+Ships pgmorbac 1.0.2: `is_allowed()` and `is_allowed_nocache()` answer FALSE
+for a NULL user instead of failing on `auth_cache`, and `upgradeScripts()` now
+includes `pgmorbac--1.0.1--1.0.2.sql`.
+
 ## [1.0.1] - 2026-10-14
 
 Ships pgmorbac 1.0.1: `is_allowed_nocache()` no longer resolves roles once per

package.json

@@ -1,6 +1,6 @@
 {
   "name": "@crudy/pgmorbac",
-  "version": "1.0.1",
+  "version": "1.0.2",
   "type": "module",
   "description": "Multi-OrBAC for PostgreSQL: the pgmorbac extension SQL from each signed release, for Node.js projects and migration runners",
   "keywords": [