1.0.2 — Release provenance + build cleanup

• Adds a GitHub Actions release workflow that builds in CI and attaches a cryptographic build-provenance attestation to main.js, so it can be verified as actually built from this source.
• Adds a "Permissions & behavior" README section disclosing filesystem access, shell execution, and vault enumeration upfront.
• Removes the builtin-modules dev dependency (redundant with esbuild's platform: "node"; verified the bundle output is unchanged).

See CHANGELOG.md for details.

1.0.1 — Pandoc/xelatex auto-detection

Adds automatic detection of Pandoc/xelatex install paths (used to pre-fill settings on first install and via a "Locate" button), since Obsidian.app doesn't inherit shell PATH entries like Homebrew's /opt/homebrew/bin.

See CHANGELOG.md for details.

1.0.0 — Plugin rewrite

Rollup to PDF is now a real Obsidian plugin instead of a set of Templater scripts. Not yet in the community plugin store — install with BRAT (see README) or manually by copying main.js and manifest.json from this release into /.obsidian/plugins/rollup-to-pdf/.

See CHANGELOG.md for details.