From 3286e9f104b4194b5209a497304cdabd03bef3dd Mon Sep 17 00:00:00 2001
From: "github-actions[bot]"
 <41898282+github-actions[bot]@users.noreply.github.com>
Date: Fri, 12 Jun 2026 18:22:16 +0000
Subject: [PATCH] docs(changelog): promote [Unreleased] into [1.0.0]

[skip ci] Auto-generated by Release workflow.
---
 CHANGELOG.md | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 1d7b286..c9703a7 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -9,6 +9,9 @@ and adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
 ## [Unreleased]
 
+
+## [1.0.0] - 2026-06-12
+
 ### Security
 
 - Closed a path-traversal hole where a symbolic link inside an indexed project that pointed *outside* the project root could make CodeGraph serve that out-of-root file's contents (for example a file under your home directory) to the AI agent. CodeGraph now resolves symlinks when validating file access and refuses to read anything whose real location is outside the project, while still allowing symlinks that stay within it. Thanks @sulthonzh. (#527)
@@ -389,3 +392,4 @@ Thanks @andreinknv for the substantive draft this release was based on.
 [0.7.6]: https://github.com/colbymchenry/codegraph/releases/tag/v0.7.6
 [0.9.8]: https://github.com/colbymchenry/codegraph/releases/tag/v0.9.8
 [0.9.9]: https://github.com/colbymchenry/codegraph/releases/tag/v0.9.9
+[1.0.0]: https://github.com/colbymchenry/codegraph/releases/tag/v1.0.0