✅ Path Header Scanner v1.0.0 — First Stable Release

Path Header Scanner v1.0.0 is the first stable production release of the
configuration-driven CLI for previewing, validating, inserting, and updating
repository-relative path headers.

The release promotes the functionality validated in `v1.0.0-rc.1` and defines
the initial compatibility baseline for commands, configuration, supported
languages, mutation safety, and extension points.

- Preview-first recursive scanning with explicit `--apply` for changes.
- Missing and stale path-header detection with language-aware corrections.
- Python, JavaScript and TypeScript, Shell, PHP, HTML, and Markdown support.
- Predictable repository-relative paths and configurable ignore rules.
- Safe initialization and scanning through an authoritative `--dry-run` mode.
- Namespaced `.config/path_header_scanner/config.toml` configuration.
- Rich help, progress, summaries, concise actionable errors, reliable failure exits, and configurable debug logging.
- Automated tests, MkDocs documentation, modular Make workflows, Docker, Compose, GitHub Actions, and GitLab CI.
- Release pipelines that derive provider registry destinations from the active repository, require reviewed annotated tags, preserve safely rendered full tag-message notes with populated metadata and literal Docker commands, publish exact prerelease images, and publish stable images under exact, minor, major, and `latest` tags.

Start with a preview:

```bash
path-header-scanner scan app
```

Apply changes only after reviewing the preview:

```bash
path-header-scanner scan app --apply
```

Use `--dry-run` whenever automation or configuration might enable mutation. It
overrides apply mode and keeps target-project files unchanged. Diagnostic logs
may still be written to their configured destination.

The project separates CLI, configuration, scanner, processor, updater, language
strategies, initialization, services, UI, and utilities into focused modules.
This makes new language support and workflow improvements easier to locate,
test, debug, maintain, and extend.

Authorized users can install the stable package from the private GitLab
registry. Configure pip authentication with a deploy token limited to
`read_package_registry`, then use the token-free project index URL:

```bash
python -m pip install \
  --index-url "https://gitlab.com/api/v4/projects/<project-id>/packages/pypi/simple" \
  "path-header-scanner==1.0.0"
```

Supply credentials through an approved protected pip credential mechanism or
its interactive authentication flow. Never commit tokens or include them in
shared command history. Only the protected release pipeline publishes packages;
unprotected tags remain validation-only.

- Version: `v1.0.0`
- Previous version: `v1.0.0-rc.1`
- Previous stable version: none
- Release lineage: pre-RC checkpoints 1–4 → first RC v1.0.0-rc.1 → post-RC stabilization → first stable v1.0.0
- Strategy: Semantic Versioning
- Package compatibility: Python 3.11+
- Standard development/container runtime: Python 3.14
- Stability: Stable for the documented command set
- Container tags: `v1.0.0`, `v1.0`, `v1`, and `latest`; exact version recommended for reproducible automation

Thank you for testing the release candidate and helping establish the first
stable Path Header Scanner release line.

_Release: v1.0.0_
_Author: Devalltect / Rizky Fernandes_