Vitals 1.0.1

Same app as 1.0.0; this release carries it to the channels 1.0.0 missed.

Fixed

• Google Play: the first production release is uploaded as a draft, which is
  all Play accepts from an app that has not yet passed review. Staged
  rollouts start with the next release once the app is live.
• winget: the update job could not start, because the action it used pulls
  in an unpinned action this repository's pinning policy refuses. It now
  runs Komac directly, pinned by version and checksum.

---

Downloads

Windows	Installer
Intel / AMD (x64)	Vitals_x64-setup.exe
ARM64 (Snapdragon)	Vitals_arm64-setup.exe

Verifying this download

Windows may show a SmartScreen warning on first run (Windows protected your
PC) because the installer is not yet signed with a commercial certificate.
Choose More info → Run anyway. That is expected — see
docs/distribution.md.

You do not have to take our word for what is in the binary. With the
GitHub CLI:

gh attestation verify .\Vitals_x64-setup.exe --repo dragoscv/vitals

This proves the file was built by this repository's release workflow from the
tagged commit, and nowhere else. Checksums for every file are in
SHA256SUMS.txt:

(Get-FileHash .\Vitals_x64-setup.exe -Algorithm SHA256).Hash.ToLower()

Software bills of materials (CycloneDX) for the Rust and JavaScript
dependencies are attached as sbom-rust.cdx.json and sbom-js.cdx.json.

Full Changelog: v1.0.0...v1.0.1