v1.0.1

Kennel 1.0.1 is a hardening release for the stable package and dependency workflows introduced in 1.0.0.

Highlights

• Hardened dependency identifiers, install paths, hosted-registry authorization, and invalid token-store handling.
• Made package replacement transactional, restoring the previous installation when clone, checkout, revision, or copy operations fail.
• Added crash-safe atomic persistence for manifests, lockfiles, registry metadata, scaffolds, rollback restoration, and private mode-0600 token stores.
• Fixed benchmark report serialization so generated artifacts are valid, schema-checked JSON.
• Added regression coverage for symlink containment, rollback, atomic persistence, token replacement, and installer cleanup.
• Repaired release CI runtime setup and artifact execution.

Compatibility

• Manifest, lockfile, registry, and benchmark schemas are unchanged.
• Normal CLI commands and output remain compatible.
• Kujo 1.0.0 or newer is required.

Verification

• ShipCheck: 16/16 checks passed with zero warnings.
• Full Kennel verification profile passed locally.
• GitHub Actions release-candidate workflow passed on Linux and macOS.
• SBOM provenance attestation completed successfully.

Supply-chain artifacts

• SPDX JSON SBOM
• SHA-256 integrity manifest
• Attestation workflow

Full changelog: v1.0.0...v1.0.1

v1.0.0

Kennel is the package and dependency foundation for the Kujo ecosystem. This official 1.0 stable release includes deterministic lockfiles, local and GitHub dependencies, semantic-version and transitive resolution, hosted registries, trust policy, ownership, private packages, publishing, yanking, and verified CLI compatibility.