diff --git a/CHANGELOG.md b/CHANGELOG.md
index 1c8dedf..30a0fc3 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,6 +3,13 @@
 All notable changes to this project will be documented in this file. See
 [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
 
+## [1.0.3](https://github.com/ivuorinen/base-configs/compare/v1.0.2...v1.0.3) (2026-02-27)
+
+
+### Bug Fixes
+
+* **ci:** replace read-all with specific permissions in workflows ([ae49ca9](https://github.com/ivuorinen/base-configs/commit/ae49ca90c610e5ee4b31c4fa814571e733834ac7))
+
 ## [1.0.2](https://github.com/ivuorinen/base-configs/compare/v1.0.1...v1.0.2) (2026-02-26)
 
 ### Bug Fixes
diff --git a/package.json b/package.json
index f5edfb8..dc2e81a 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@ivuorinen/base-configs",
-  "version": "1.0.2",
+  "version": "1.0.3",
   "type": "module",
   "description": "ivuorinen's shareable configurations meta package",
   "author": {