Pullbox v1.0.1

What's Changed

Patch maintenance release focused on dependency freshness and release-pipeline
hygiene after the 1.0 launch.

CI / Build

• Updated pinned GitHub Actions used by CI, Docker validation, CodeQL branch
  probing, release image publication, and security scanning workflows.
• Updated Tailwind CSS and the Tailwind CLI to 4.3.2 and regenerated the
  compiled stylesheet.
• Added a narrow local and CI pip-audit ignore for the current Safety
  toolchain's transitive nltk advisory while no fixed upstream version is
  available.

Commit Details

🧰 Chores

• bump version to 1.0.1 for release
• integrate dependabot maintenance batch
• bump @tailwindcss/cli from 4.3.1 to 4.3.2
• bump tailwindcss from 4.3.1 to 4.3.2
• sync develop after v1.0.0 release

🏗️ CI / Build

• bump the actions-all group with 8 updates

🐳 Docker Images

docker pull ghcr.io/pullboxapp/pullbox:1.0.1
docker pull docker.io/pullbox/pullbox:1.0.1

Digest: sha256:aa066660091db96a20ddea2075ba673409e6bfeb6970e495d92d33be9d5981fd

🔐 Image Verification

Release images are signed with keyless Sigstore/Cosign using GitHub Actions OIDC.
These commands verify the exact multi-architecture image digest published by this release.

cosign verify \
  --certificate-identity-regexp '^https://github.com/pullboxapp/pullbox/\.github/workflows/docker-release\.yml@refs/tags/v1.0.1$' \
  --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' \
  ghcr.io/pullboxapp/pullbox@sha256:aa066660091db96a20ddea2075ba673409e6bfeb6970e495d92d33be9d5981fd

cosign verify \
  --certificate-identity-regexp '^https://github.com/pullboxapp/pullbox/\.github/workflows/docker-release\.yml@refs/tags/v1.0.1$' \
  --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' \
  docker.io/pullbox/pullbox@sha256:aa066660091db96a20ddea2075ba673409e6bfeb6970e495d92d33be9d5981fd

Full Changelog: v1.0.0...v1.0.1