diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 2f998c9..39344f9 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -418,4 +418,9 @@ jobs:
           # performs RSA private-key operations, so the timing leak is not
           # reachable from this plugin. Re-check when sspi drops picky or
           # rsa ships a fix.
-          ignore: RUSTSEC-2026-0235,RUSTSEC-2023-0071
+          # RUSTSEC-2026-0441 is a maintenance notice with no patched
+          # release, not a disclosed vulnerability. On macOS/iOS, sspi
+          # pulls pin-utils through async-dnssd; NTLM does not use DNS-SD.
+          # Accept this transitive maintenance risk until sspi/async-dnssd
+          # removes pin-utils. Re-check on either dependency upgrade (#63).
+          ignore: RUSTSEC-2026-0235,RUSTSEC-2023-0071,RUSTSEC-2026-0441
diff --git a/.tabularium b/.tabularium
index c02c9ec..0d2a20f 100644
--- a/.tabularium
+++ b/.tabularium
@@ -2,7 +2,7 @@
   "$schema": "https://registry.tabularis.dev/manifest.schema.json?kind=driver",
   "id": "sqlserver",
   "name": "SQL Server",
-  "version": "1.0.0-beta.4",
+  "version": "1.0.1",
   "description": "Full-featured Microsoft SQL Server driver for Tabularis with schema browsing, query execution, visual plans, type-aware row editing, DDL, routines, triggers, BLOBs, and database-user management.",
   "category": "database",
   "tags": ["driver", "sqlserver", "mssql", "sql", "relational", "database-driver"],
diff --git a/CHANGELOG.md b/CHANGELOG.md
index da6e56e..a7af5d4 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -7,6 +7,8 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [1.0.1] - 2026-11-10
+
 ### Added
 
 - NTLM authentication with `DOMAIN\user` and password on every platform,
@@ -15,6 +17,15 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 ### Changed
 
 - Upgrade Microsoft's `mssql-tiberius-bridge` to 0.3.0 and `mssql-tds` to 0.4.0.
+- Update OpenSSL, UUID and the EXPLAIN parser's development dependencies.
+
+### Security
+
+- Document an audit exception for RUSTSEC-2026-0441: `pin-utils` is
+  unmaintained and has no patched release. It is pulled in by `sspi` through
+  `async-dnssd` on macOS/iOS; the plugin does not use its pinning macros
+  directly. Revisit the exception when those upstream dependencies migrate.
+  The transitive maintenance risk remains accepted (#63).
 
 ## [1.0.0-beta.4] - 2026-10-25
 
@@ -155,7 +166,8 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
   regression coverage for pool identity, million-row truncation and concurrent
   responsiveness.
 
-[Unreleased]: https://github.com/TabularisDB/tabularis-sqlserver-plugin/compare/v1.0.0-beta.4...HEAD
+[Unreleased]: https://github.com/TabularisDB/tabularis-sqlserver-plugin/compare/v1.0.1...HEAD
+[1.0.1]: https://github.com/TabularisDB/tabularis-sqlserver-plugin/compare/v1.0.0-beta.4...v1.0.1
 [1.0.0-beta.4]: https://github.com/TabularisDB/tabularis-sqlserver-plugin/compare/v1.0.0-beta.3...v1.0.0-beta.4
 [1.0.0-beta.3]: https://github.com/TabularisDB/tabularis-sqlserver-plugin/compare/v1.0.0-beta.2...v1.0.0-beta.3
 [1.0.0-beta.2]: https://github.com/TabularisDB/tabularis-sqlserver-plugin/compare/v1.0.0-beta.1...v1.0.0-beta.2
diff --git a/Cargo.lock b/Cargo.lock
index 09af646..0fe8967 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -2278,7 +2278,7 @@ checksum = "3a0219bd7d979d58245a4f41f695e1ac9f8befdffadd7f61f1bae9e39abc6620"
 
 [[package]]
 name = "sqlserver-plugin"
-version = "1.0.0-beta.4"
+version = "1.0.1"
 dependencies = [
  "base64",
  "chrono",
diff --git a/Cargo.toml b/Cargo.toml
index 3468d91..d15f7c5 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "sqlserver-plugin"
-version = "1.0.0-beta.4"
+version = "1.0.1"
 edition = "2021"
 description = "Tabularis driver plugin for Microsoft SQL Server"
 license = "Apache-2.0"
diff --git a/docs/registry-entry.json b/docs/registry-entry.json
index 6e0417f..58b6c93 100644
--- a/docs/registry-entry.json
+++ b/docs/registry-entry.json
@@ -4,8 +4,19 @@
   "description": "Full-featured Microsoft SQL Server driver for Tabularis with schema browsing, query execution, visual plans, type-aware row editing, DDL, routines, triggers, BLOBs, and database-user management.",
   "author": "Andrea Debernardi <https://github.com/debba>",
   "homepage": "https://github.com/TabularisDB/tabularis-sqlserver-plugin",
-  "latest_version": "1.0.0-beta.4",
+  "latest_version": "1.0.1",
   "releases": [
+    {
+      "version": "1.0.1",
+      "min_tabularis_version": "0.25.1-5",
+      "assets": {
+        "linux-x64": "https://github.com/TabularisDB/tabularis-sqlserver-plugin/releases/download/v1.0.1/sqlserver-plugin-linux-x64.zip",
+        "linux-arm64": "https://github.com/TabularisDB/tabularis-sqlserver-plugin/releases/download/v1.0.1/sqlserver-plugin-linux-arm64.zip",
+        "darwin-x64": "https://github.com/TabularisDB/tabularis-sqlserver-plugin/releases/download/v1.0.1/sqlserver-plugin-darwin-x64.zip",
+        "darwin-arm64": "https://github.com/TabularisDB/tabularis-sqlserver-plugin/releases/download/v1.0.1/sqlserver-plugin-darwin-arm64.zip",
+        "win-x64": "https://github.com/TabularisDB/tabularis-sqlserver-plugin/releases/download/v1.0.1/sqlserver-plugin-win-x64.zip"
+      }
+    },
     {
       "version": "1.0.0-beta.4",
       "min_tabularis_version": "0.25.1-5",
diff --git a/explain/package.json b/explain/package.json
index 6ebc53d..aaf67fc 100644
--- a/explain/package.json
+++ b/explain/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@tabularis/explain-sqlserver",
-  "version": "1.0.0-beta.4",
+  "version": "1.0.1",
   "description": "SQL Server SHOWPLAN XML parser for Tabularis Visual EXPLAIN",
   "license": "Apache-2.0",
   "homepage": "https://github.com/TabularisDB/tabularis-sqlserver-plugin/tree/main/explain",
diff --git a/ui/package-lock.json b/ui/package-lock.json
index c4a77c5..c5dbb7b 100644
--- a/ui/package-lock.json
+++ b/ui/package-lock.json
@@ -1,12 +1,12 @@
 {
   "name": "@tabularis/sqlserver-plugin-ui",
-  "version": "1.0.0-beta.4",
+  "version": "1.0.1",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@tabularis/sqlserver-plugin-ui",
-      "version": "1.0.0-beta.4",
+      "version": "1.0.1",
       "devDependencies": {
         "@tabularis/plugin-api": "^0.1.1",
         "@types/react": "^19.2.7",
diff --git a/ui/package.json b/ui/package.json
index cdd4ab8..2e87ae1 100644
--- a/ui/package.json
+++ b/ui/package.json
@@ -1,7 +1,7 @@
 {
   "name": "@tabularis/sqlserver-plugin-ui",
   "private": true,
-  "version": "1.0.0-beta.4",
+  "version": "1.0.1",
   "description": "Connection-modal UI extension for the SQL Server plugin (Windows Authentication checkbox).",
   "type": "module",
   "scripts": {