chore: bump to v1.0.0, manual release workflow

- Version 1.0.0 (stable, no API changes from 0.2.0)
- Release workflow: workflow_dispatch with dry-run option (was tag-triggered)
- Removed v0.2.0 tag

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Author: alexpipipi

.github/workflows/release.yml

@@ -1,9 +1,12 @@
 name: Release
 
 on:
-  push:
-    tags:
-      - 'v*'
+  workflow_dispatch:
+    inputs:
+      dry-run:
+        description: 'Dry run (skip actual publish)'
+        type: boolean
+        default: false
 
 permissions:
   contents: read
@@ -23,6 +26,8 @@ jobs:
       - run: npm run typecheck
       - run: npm run test:unit
       - run: npm run build
-      - run: npm publish --provenance
+      - name: Publish to npm
+        if: ${{ !inputs.dry-run }}
+        run: npm publish --provenance
         env:
           NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}

CHANGELOG.md

@@ -1,5 +1,14 @@
 # Changelog
 
+## 1.0.0 (2026-03-04)
+
+First stable release. No API changes from 0.2.0.
+
+- Repo cleanup: squashed git history, added CI/CD, docs, templates
+- Node.js minimum bumped from 18 to 20 (Node 18 EOL)
+- Added: SECURITY.md, CONTRIBUTING.md, CODE_OF_CONDUCT.md, AGENTS.md
+- Added: GitHub Actions CI (Node 20/22/24) and manual release workflow
+
 ## 0.2.0 (2026-03-03)
 
 ### Security

SECURITY.md

@@ -22,5 +22,5 @@ This policy covers the `eodhd` npm package source code. For vulnerabilities in t
 
 | Version | Supported |
 |---------|-----------|
-| 0.2.x   | Yes       |
-| < 0.2   | No        |
+| 1.x     | Yes       |
+| < 1.0   | No        |

package-lock.json

@@ -1,6 +1,6 @@
 {
   "name": "eodhd",
-  "version": "0.2.0",
+  "version": "1.0.0",
   "description": "Official Node.js/TypeScript library for EODHD Financial Data APIs",
   "main": "dist/index.js",
   "module": "dist/index.mjs",