chore: bump version to 1.0.0 and update changelog

CHANGELOG.md

@@ -5,6 +5,27 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [1.0.0] — 2026-06-22
+
+### Summary
+v1.0.0 is the CI-readiness release. The core scanner and migrator are stable. This release adds stable finding fingerprints, baseline-aware CI enforcement, and the documented safety model that makes FlagLint adoptable by platform teams without needing to fix all existing debt first.
+
+### Added
+- **Stable finding fingerprints** — each finding now carries a `fingerprint: string` field (`launchdarkly:callType:flagKey:normalizedFilePath`) that remains stable across line-number changes. Fingerprints are the foundation for baseline mode and SARIF result identity.
+- **Baseline mode** — `flaglint audit --write-baseline <file>` captures current debt fingerprints. `flaglint validate --baseline <file> --fail-on-new` fails CI only for findings not in the baseline, enabling day-one CI adoption without requiring teams to fix all historical debt first.
+- **Safety model docs** — `/docs/concepts/safety-model/` documents what FlagLint will and will not auto-rewrite, and why safety takes precedence over coverage.
+- **JSON output contract** — documented v1.x compatibility promise: existing fields will not be renamed, removed, or retyped within v1.x; new fields may be added additively only.
+- **Stable exit codes** — documented 0/1/2/3 contract: 0=success, 1=policy failure, 2=invalid input, 3=internal error.
+- **ADR 007** — stable finding fingerprint schema.
+- **ADR 008** — baseline mode design, file format, and edge case behavior.
+- **Expanded fixture coverage** — golden fixtures for bulk methods, detail methods, and false-positive guards.
+
+### Scope (v1.x)
+- **Supported:** LaunchDarkly Node.js server SDK (`@launchdarkly/node-server-sdk`, `launchdarkly-node-server-sdk`)
+- **Out of scope:** Browser SDK, React SDK, Go, Python, Java — see safety model docs
+
+---
+
 ## [0.8.0] - 2026-06-13
 
 ### Changed

docs-src/content/docs/docs/reference/changelog.md

@@ -1,12 +1,33 @@
 ---
 title: Changelog
 description: Recent FlagLint releases and what changed.
-lastUpdated: 2026-06-20
+lastUpdated: 2026-06-22
 tableOfContents: false
 ---
 
 import { LinkCard } from '@astrojs/starlight/components';
 
+## [1.0.0] — 2026-06-22
+
+### Summary
+v1.0.0 is the CI-readiness release. The core scanner and migrator are stable. This release adds stable finding fingerprints, baseline-aware CI enforcement, and the documented safety model that makes FlagLint adoptable by platform teams without needing to fix all existing debt first.
+
+### Added
+- **Stable finding fingerprints** — each finding now carries a `fingerprint: string` field (`launchdarkly:callType:flagKey:normalizedFilePath`) that remains stable across line-number changes. Fingerprints are the foundation for baseline mode and SARIF result identity.
+- **Baseline mode** — `flaglint audit --write-baseline <file>` captures current debt fingerprints. `flaglint validate --baseline <file> --fail-on-new` fails CI only for findings not in the baseline, enabling day-one CI adoption without requiring teams to fix all historical debt first.
+- **Safety model docs** — `/docs/concepts/safety-model/` documents what FlagLint will and will not auto-rewrite, and why safety takes precedence over coverage.
+- **JSON output contract** — documented v1.x compatibility promise: existing fields will not be renamed, removed, or retyped within v1.x; new fields may be added additively only.
+- **Stable exit codes** — documented 0/1/2/3 contract: 0=success, 1=policy failure, 2=invalid input, 3=internal error.
+- **ADR 007** — stable finding fingerprint schema.
+- **ADR 008** — baseline mode design, file format, and edge case behavior.
+- **Expanded fixture coverage** — golden fixtures for bulk methods, detail methods, and false-positive guards.
+
+### Scope (v1.x)
+- **Supported:** LaunchDarkly Node.js server SDK (`@launchdarkly/node-server-sdk`, `launchdarkly-node-server-sdk`)
+- **Out of scope:** Browser SDK, React SDK, Go, Python, Java — see safety model docs
+
+---
+
 ## [0.9.0] — 2026-06-20
 
 ### Added

docs-src/pages/guides/index.astro

@@ -300,7 +300,7 @@
           <span class="guide-tag">OpenFeature</span>
           <span class="guide-tag">LaunchDarkly</span>
         </div>
-        <span class="guide-verified">Verified · v0.9.0</span>
+        <span class="guide-verified">Verified · v1.0.0</span>
         <span class="guide-updated">Updated 2026-06-07</span>
       </div>
     </a>

docs-src/pages/guides/launchdarkly-to-openfeature-nodejs.astro

@@ -645,7 +645,7 @@
     <div class="article-meta">
       <span>Published 2026-06-07</span>
       <span>·</span>
-      <span>Verified with FlagLint v0.9.0</span>
+      <span>Verified with FlagLint v1.0.0</span>
       <span>·</span>
       <span>Node.js · OpenFeature · LaunchDarkly</span>
     </div>
@@ -936,7 +936,7 @@ openFeatureClient.getBooleanValue("checkout-v2", false, context);</pre>
     <div class="fact-card">
       <div class="fact-card-header">
         enterprise-checkout-service
-        <span class="verified-badge">Verified · FlagLint v0.9.0</span>
+        <span class="verified-badge">Verified · FlagLint v1.0.0</span>
       </div>
       <div class="fact-grid">
         <div class="fact-cell">

docs-src/pages/index.astro

@@ -906,7 +906,7 @@ const jsonLd = {
               <span class="dot yellow"></span>
               <span class="dot green"></span>
             </div>
-            <span class="term-version">flaglint v0.9.0</span>
+            <span class="term-version">flaglint v1.0.0</span>
           </div>
           <div class="terminal-body">
 <pre><span class="t-dim">$</span> npx flaglint audit ./src --effort-estimate

package.json

@@ -1,7 +1,7 @@
 {
   "name": "flaglint",
-  "version": "0.9.0",
-  "description": "Find every direct LaunchDarkly SDK call, detect flag debt, and generate safe OpenFeature migration plans. Static analysis — no API key required.",
+  "version": "1.0.0",
+  "description": "Static analysis CLI for finding LaunchDarkly JavaScript/TypeScript flag debt, CI enforcement with baseline mode, and safe OpenFeature migration assistance. No API key required.",
   "type": "module",
   "bin": {
     "flaglint": "dist/bin/flaglint.js"