From 49eb466425a0ac04219961b7020c3af02afe784b Mon Sep 17 00:00:00 2001
From: K1-R1 <77465250+K1-R1@users.noreply.github.com>
Date: Sun, 15 Mar 2026 18:57:25 +0000
Subject: [PATCH 1/2] chore: prepare v1.0.1 release

Signed-off-by: K1-R1 <77465250+K1-R1@users.noreply.github.com>
---
 CHANGELOG.md | 32 +++++++++++++++++++++++++++++++-
 smoosh       |  2 +-
 2 files changed, 32 insertions(+), 2 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 35ba673..a4cd2a0 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -7,6 +7,35 @@ and this project adheres to [Semantic Versioning](https://semver.org/).
 
 ## [Unreleased]
 
+## [1.0.1] - 2026-03-15
+
+### Fixed
+
+- `install.sh` now aborts (exit 1) when the `.sha256` checksum file is absent,
+  rather than warning and continuing with an unverified binary. Set
+  `SMOOSH_NO_VERIFY=1` to opt out in restricted environments.
+- `--all` mode now exits with a clear error when the `file` command is not
+  found, rather than silently including all files without MIME filtering.
+- Exit codes 4 and 130 added to `--help` output (were documented in README
+  but missing from the inline reference).
+
+### Added
+
+- 30 golden file tests covering byte-for-byte output across all mode and
+  format combinations (`test/smoosh_golden.bats`).
+- `test/ACCEPTANCE.md` — manual acceptance test scenarios for interactive
+  mode, remote repos, AI tool integrations, and secrets detection.
+- `MAINTAINING.md` — operational guide covering release procedure, pinned
+  dependency inventory, and periodic maintenance schedule.
+- Bash 3.2 syntax-check CI job on macOS (`/bin/bash -n smoosh`).
+- Dependabot configured for monthly GitHub Actions SHA updates.
+
+### Changed
+
+- CI and release workflow install shfmt via `go install` (Go module sum
+  database) instead of a raw binary download, which had no integrity check.
+- Demo GIFs and VHS tape moved to `assets/` directory.
+
 ## [1.0.0] - 2026-03-14
 
 ### Added
@@ -32,5 +61,6 @@ and this project adheres to [Semantic Versioning](https://semver.org/).
 - Output path shown relative to repo root
 - Demo recordings: interactive mode flow and power-user flags
 
-[Unreleased]: https://github.com/K1-R1/smoosh/compare/v1.0.0...HEAD
+[Unreleased]: https://github.com/K1-R1/smoosh/compare/v1.0.1...HEAD
+[1.0.1]: https://github.com/K1-R1/smoosh/compare/v1.0.0...v1.0.1
 [1.0.0]: https://github.com/K1-R1/smoosh/releases/tag/v1.0.0
diff --git a/smoosh b/smoosh
index bae356c..fceb178 100755
--- a/smoosh
+++ b/smoosh
@@ -5,7 +5,7 @@
 
 set -euo pipefail
 
-readonly VERSION="1.0.0"
+readonly VERSION="1.0.1"
 
 # ---------------------------------------------------------------------------
 # Globals — argument variables (set by parse_args, read everywhere)

From f37fc597ba299365505928b8537b2ddc20c9f872 Mon Sep 17 00:00:00 2001
From: K1-R1 <77465250+K1-R1@users.noreply.github.com>
Date: Sun, 15 Mar 2026 19:01:19 +0000
Subject: [PATCH 2/2] test: match --version output by format not hardcoded
 value

Asserting 'smoosh 1.0.0' breaks on every release. Use a semver
regex instead so the test survives future version bumps.

Signed-off-by: K1-R1 <77465250+K1-R1@users.noreply.github.com>
---
 test/smoosh_args.bats | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/test/smoosh_args.bats b/test/smoosh_args.bats
index d3d35ad..6b2b539 100644
--- a/test/smoosh_args.bats
+++ b/test/smoosh_args.bats
@@ -52,7 +52,8 @@ load 'test_helper/common-setup'
 
 @test "--version prints version string" {
   run smoosh --version
-  assert_output "smoosh 1.0.0"
+  assert_output --partial "smoosh "
+  assert_output --regexp "^smoosh [0-9]+\.[0-9]+\.[0-9]+$"
 }
 
 # ---------------------------------------------------------------------------