diff --git a/CHANGELOG.md b/CHANGELOG.md
index 612db9e..dde95a8 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -7,6 +7,12 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [1.0.2] - 2026-08-31
+
+### Added
+
+- CI workflow that publishes tagged releases to PyPI.
+
 ## [1.0.1] - 2026-08-28
 
 ### Fixed
@@ -55,6 +61,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 - Three interchangeable console commands: `cryptnox-id`, the short `cnx-id`,
   and `cryptnox-id-card`.
 
-[Unreleased]: https://github.com/cryptnox/cryptnox-id-cli/compare/v1.0.1...HEAD
+[Unreleased]: https://github.com/cryptnox/cryptnox-id-cli/compare/v1.0.2...HEAD
+[1.0.2]: https://github.com/cryptnox/cryptnox-id-cli/compare/v1.0.1...v1.0.2
 [1.0.1]: https://github.com/cryptnox/cryptnox-id-cli/compare/v1.0.0...v1.0.1
 [1.0.0]: https://github.com/cryptnox/cryptnox-id-cli/releases/tag/v1.0.0
diff --git a/docs/conf.py b/docs/conf.py
index 7e4ab20..f9c8f6f 100644
--- a/docs/conf.py
+++ b/docs/conf.py
@@ -24,7 +24,7 @@
 project = product_name
 author = "Cryptnox"
 copyright = "2026, Cryptnox"  # noqa: A001 — footer format matches docs.cryptnox.com/cryptnox-cli
-release = "1.0.1"  # keep in sync with the CLI release (see internal release checklist)
+release = "1.0.2"  # keep in sync with the CLI release (see internal release checklist)
 version = release
 
 # -- Versioned docs, same scheme as docs.cryptnox.com/cryptnox-hardware-wallet:
diff --git a/pyproject.toml b/pyproject.toml
index 8d37816..f15956e 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "cryptnox-id-cli"
-version = "1.0.1"
+version = "1.0.2"
 description = "Polished CLI for the Cryptnox multi-applet smartcard (PIV / FIDO2 / MIFARE DESFire EV2)"
 readme = "README.md"
 requires-python = ">=3.10"
diff --git a/src/cryptnox_id_cli/__init__.py b/src/cryptnox_id_cli/__init__.py
index 9717cb1..194c1bb 100644
--- a/src/cryptnox_id_cli/__init__.py
+++ b/src/cryptnox_id_cli/__init__.py
@@ -14,7 +14,7 @@
 verification.
 """
 
-__version__ = "1.0.1"
+__version__ = "1.0.2"
 
 #: Primary console command name. Single source of truth for every user-facing
 #: render of the CLI's name (usage/version, prompt, banner, messages). The