1.0.0 (2026-06-28)
📊 325 commits · 1 breaking change
⚠ BREAKING CHANGES
- branding: Flowatch graduates from the 0.0.x pre-release line to
the 1.0.0 GA series. This triggers the major-version bump per the
release milestone plan; on develop semantic-release emits 1.0.0-beta.1.
🎨 Modelers (BPMN & DMN)
- modeler: DMN round-trip + JUEL guard; document no-Flowable-DMN-extensions (Story 30.2) (ace0a53)
- modeler: Flowable BPMN properties panel with lossless extension round-trip (Story 30.1) (c7269bd)
- modeler: split properties panel into modules for the NFR-21 size gate (965cefe)
- modeler: surface flowable:topic in ServiceTask properties panel (6e664aa)
▶️ Runtime, Tasks & Forms
- forms: apply code-review patches to form-js task rendering (Story 29.1) (554f938)
- forms: render task forms via @bpmn-io/form-js-viewer with legacy fallback (Story 29.1) (9585f13)
🔐 Authentication
- auth: extract SettingsAuthTab from components.tsx for NFR-21 size gate (69871f9)
- auth: keep test/edit/delete buttons visible when connection test returns an error (b8a264a)
- auth: Story 28.2 — Settings Authentication tab + install-auth-strategy dispatcher (7f27c0f)
- auth: Story 28.3 — Bearer (paste-a-token) auth strategy (8d6c8b5)
- oidc: Keycloak OIDC test fixture for the AuthStrategy (Story 28.4) (5b6949e)
- oidc: stop 401 redirect loop, Basic Og== leak, sessionStorage tokens, post-signin refetch (Story 28.4) (ca2143a)
- oidc: Story 28.4 — OIDC Authorization Code + PKCE via react-oidc-context (33e7796)
🎭 Design System & Theming
- branding: graduate Flowatch to 1.0.0 GA line (0ded9a2)
🧭 Routing & Navigation
- chrome: harden version-drift banner link + version compare (Story 31.1 review) (658a6e2)
- chrome: Story 31.1 — version-drift advisory banner (NFR-7) (c755f4c)
🌐 Flowable REST contract
- api: configurable per-sub-app URI prefixes (Story 34.1, FR-59) (47384b2)
- api: move extracted-module imports to top of api.ts (biome organizeImports) (9e6e532)
- api: split api-app.ts + api-history.ts to satisfy NFR-21 (50 KB) (ff9a19e)
- api: Story 28.1 — pluggable AuthStrategy seam in request() funnel (9ba918d)
- api: Story 34.1 — configurable per-sub-app URI prefixes + review patches (1e34a7b)
- api: trim verbose comments in api.ts to satisfy NFR-21 (50 KB limit) (8e43336)
- bruno: add missing Bruno collection requests for post-1.0.0 API surface (17e3a28)
🛡️ Quality Gates
- ci: add Stryker mutation check to required branch-protection checks (de06b70)
- test: freeze API_LOG before clear in visual inspector baseline (c480e27)
- test: set Stryker mutation threshold at 70% (baseline 71.46%) (99271b6)
🧱 Foundation & Build
- docker: replace nginx CORS proxy with native Flowable CORS (Story 34.2, NFR-31) (535eb5a)
- pages: update landing page for 1.0.0 release (d49ecea)
🛠️ DevEx & Tooling
- ci: refresh NOTICE for oidc deps + extend GitGuardian allowlist (Story 28.4) (dddeed5)
- release-prep: milestone headline for 1.0.0 (b803081)
- release: 0.0.4-beta.1 [skip release] (235861d)
- release: 0.0.4-beta.2 [skip release] (67f12a5)
- release: 0.0.4-beta.3 [skip release] (14eca61)
- release: 0.0.4-beta.4 [skip release] (044cb47)
- release: 0.0.4-beta.5 [skip release] (9807ad2)
- release: 1.0.0-beta.1 [skip release] (9883d0b)
- release: 1.0.0-beta.2 [skip release] (2505dd2)
- release: 1.0.0-beta.3 [skip release] (281cf56)
- release: 1.0.0-beta.4 [skip release] (cf1e467)
- release: 1.0.0-beta.5 [skip release] (60ef769)
- release: 1.0.0-beta.6 [skip release] (46b6c06)
- release: 1.0.0-beta.7 [skip release] (c771ed6)
- release: 1.0.0-beta.8 [skip release] (0b8310a)
- release: 1.0.0-beta.9 [skip release] (ddfabf3)
- release: 1.0.0-rc.1 [skip release] (585eea5)
- release: back-merge v0.0.3 into develop [skip release] (0a5ec66)
📝 Documentation
- docs: materialize Epic 34 (Flexible Engine Connection) + re-sync backlog (994a66b)
- docs: remove stale project-scan-report.json and source-tree-analysis.md (93b552b)
- docs: resync user-stories with GitHub issues (d74b552), closes 103/#104 191-#195
- docs: slim CLAUDE.md via progressive disclosure — 79KB → 12KB (07fd0d9)
- docs: update docs for consistency and completeness post-1.0.0 (ac407ff)
- readme: add live instance-detail "see it operate" screenshot (Story 33.1 follow-up) (a6fa3fb)
- readme: add per-look Dashboard screenshots near the top (Story 33.1, DOC-DAA-001) (0dd6160)
🌍 i18n & Accessibility
- a11y: Story 32.1 — axe-core matrix audit across look×theme×screen (61bac84), closes #8
- a11y: Story 32.2 — clear all blocking axe violations + hard-gate the matrix scan (22a2eea), closes #8
- a11y: Story 32.2 review — expand axe gate to detail routes + fix found violations (025c5a5)
📦 Dependencies
- deps: bump docker/build-push-action from 7.1.0 to 7.2.0 (f5ed3e5)
- deps: bump docker/login-action from 4.1.0 to 4.2.0 (18001c6)
- deps: bump docker/setup-buildx-action from 4.0.0 to 4.1.0 (dea036b)
- deps: bump docker/setup-qemu-action from 4.0.0 to 4.1.0 (4b1772b)
- deps: bump nginxinc/nginx-unprivileged (b9838c8)
🧰 Other
- allowlist @bpmn-io/form-js-viewer in license-checker (Story 29.1) (43eaef3)
🌍 Help, i18n & Docs
- add GitHub social-preview card (Story 33.3, DOC-DAA-002) (d26b619)
- draft Flowable forum announcement for v1.0 (Story 33.2, DOC-SYS-001) (dc730e1), closes #4
Auto-generated by semantic-release.