v1.0.0

1.0.0 - 2026-10-03

Added

• Added protected automatic version-bump releases, immutable signed tags, exact-commit CI checks, and artifact attestations.

• Added four CycloneDX 1.6 component SBOMs, signed checksum manifests, and a 14-asset GitHub bundle.

• Added deterministic artifact identities, clean-build reproducibility checks, and archive license audits.

Changed

• Established the v1 CLI, plugin, and machine-report compatibility contract and explicit JDK/build-tool support matrix.
• Refreshed compatible dependencies, including JToon 2.0.4, Jackson 2.22.3, and the crap-java 1.0.1 gate.
• Adopted canonical TOON empty-array encoding and added migration guidance and report contract fixtures.
• Enforced Java 17/Maven 3.9.0 minimums and added Linux/Windows compatibility coverage for supported toolchain boundaries.

Fixed

• Avoided a reactor cycle through the project's own Maven plugin by making self-hosted quality profiles explicit; CI continues to require every module gate.
• Corrected Cognitive Complexity counting for repeated Boolean operator transitions in infix order.
• Restored Gradle 8.14 configuration-cache serialization and made nullable task-path checks explicit.
• Made nullable report-path guards explicit and prevented Maven mojo subclass finalization after constructor failure.
• Retained project and third-party license/notice contents in binary, source, and Javadoc archives.
• Fixed Windows Gradle wrapper propagation of Java process failures and added an automated regression check.