1.0.1 is a security release to match the security changes in WordPress versions 5.1.1 and 4.9.10 (both released today). It is available now. The new ClassicPress release also contains one minor bugfix related to WP-CLI.
Security fixes from
This release includes a pair of security fixes that handle how comments are filtered and then stored in the database. With some creative content, a WordPress post is vulnerable to cross-site scripting.
For more information, see the WordPress 5.1.1 release notes post.