897b792 ("auth: resource permissions resolve SPECIFIC before WILDCARD") changed lib/auth.js after the 1.1.0 version commit without bumping, so pear-git-v3 and hypermosh-shell have already published a DIFFERENT lib/auth.js under that same version. pgh's publish guard caught it on the next consumer to publish (favela-web). No behaviour change here — this only stops the version number lying about which code it names. Consumers pick up the correctly-labelled content on their next publish; their installed 1.1.0 trees are untouched. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>