From 1f3f9d9c1ac69f71bcc278422a99490e75090fec Mon Sep 17 00:00:00 2001
From: vitaliytv <v@nitra.ai>
Date: Fri, 25 Sep 2026 13:57:30 +0300
Subject: [PATCH] chore: release v0.7.2

---
 CHANGELOG.md      | 9 +++++++++
 package-lock.json | 4 ++--
 package.json      | 2 +-
 3 files changed, 12 insertions(+), 3 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 6d8f41e..c032fd6 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -5,6 +5,15 @@ All notable changes to this project are documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [0.7.2] - 2026-09-25
+
+### Fixed
+
+- Read bucket IAM policies from Cloud Asset snapshots so KCC-owned bucket
+  bindings are not reported as false orphans.
+- Distinguish IAM bindings by condition, preserving separate conditioned
+  bindings with the same role and member in inventory output.
+
 ## [0.7.1] - 2026-09-25
 
 ### Fixed
diff --git a/package-lock.json b/package-lock.json
index 7aa57f1..2d73a8c 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -1,12 +1,12 @@
 {
   "name": "@nitra/cfr",
-  "version": "0.7.1",
+  "version": "0.7.2",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@nitra/cfr",
-      "version": "0.7.1",
+      "version": "0.7.2",
       "license": "MIT",
       "dependencies": {
         "google-auth-library": "^10.9.1",
diff --git a/package.json b/package.json
index e58a7c3..7a1fac5 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@nitra/cfr",
-  "version": "0.7.1",
+  "version": "0.7.2",
   "description": "Kubernetes and GCP inventory utilities: validate Kustomize resources and reconcile live GCP coverage across Config Connector, OpenTofu state, and explicit ownership catalogs.",
   "keywords": [
     "kustomize",