docs(release): prepare v1.1.0

[paul-cch]

Summary

• Finalize the true post-v1.0.0 changelog as version 1.1.0, dated 2026-07-15.
• Keep a new empty Unreleased section for later work.
• Put the user-facing highlights first and keep the full Added, Changed, and Security notes below them.

Release boundary

The release notes cover the exact v1.0.0...HEAD changes. This remains a source-only GitHub Release. It does not add binaries, signing, notarization, package publication, or deployment.

Validation

• Changelog structure and release-body extraction match exactly.
• Fresh Python 3.11 dependency resolution and pip check passed with Pillow 12.3.0.
• Exact OSV proof returned no advisories for Pillow 12.3.0.
• Ruff, 73 unit tests, and 8 CLI flow tests passed.
• Bash syntax, ShellCheck, workflow YAML, Quartz/display checks, both Swift builds and runtime smokes, and the sandboxed installer passed.
• Autoreview returned no accepted or actionable findings.
• Privacy and Public Model Identifier Gates: PASS.

[Copilot]

Copilot was unable to review this pull request because the user who requested the review has reached their quota limit.

[paul-cch]

Landed proof for the v1.1.0 release preparation:

• Reviewed commit: 02ac75516fcf0a2bad9dfdd6987efa7fcd04cdb9
• Merge and release-candidate commit: a6c17dac4716ac4bf98a8663566aeaabbca24c32
• Pull-request CI: https://github.com/paul-cch/WalBridge/actions/runs/29438435981
• Exact-head main CI: https://github.com/paul-cch/WalBridge/actions/runs/29438534492
• The tracked 1.1.0 changelog section matches the reviewed GitHub Release body exactly.
• Local proof passed fresh Pillow 12.3.0 resolution, pip check, the exact advisory query, Ruff, 73 unit tests, 8 CLI flow tests, shell and workflow checks, Quartz/display checks, both Swift builds and runtime smokes, and the sandboxed installer.
• GitHub Actions passed all seven jobs, including macOS validation and installer smoke.
• Live macOS proof passed real-session wallpaper and theme output, display-change reapply, config and environment cache invalidation, VS Code rule preservation, and first-startup cycle checks. Wallpaper assignments, relevant file hashes, appearance, and WalBridge process state matched the pre-test snapshot after restoration.
• Autoreview returned no accepted or actionable findings.
• Privacy and Public Model Identifier Gates: PASS.

[paul-cch]

WalBridge v1.1.0 release receipt

WalBridge v1.1.0 is published from candidate a6c17dac4716ac4bf98a8663566aeaabbca24c32.

• Prerequisite security update: PR #8, merged as a9933af76741dacdb9a1b5772cf7ba94687bf66d; PR CI and merged-main CI passed.
• Release preparation: PR #9, merged as candidate a6c17dac4716ac4bf98a8663566aeaabbca24c32; PR CI, exact-head main CI, and the automatic Pages run passed.
• Tag verification: annotated tag object 96be1f385f9aa1b1ead07d892971cbae21481f16 peels to the exact candidate. Local and remote refs agree.
• Source verification: GitHub's automatic source tarball and source ZIP both extracted to the candidate tree. No custom assets are attached.
• Validation: fresh Python 3.11 resolution, dependency checks, Ruff, 73 unit tests, 8 CLI flow tests, Bash syntax, ShellCheck, YAML parsing, Quartz/display smoke, Swift builds and runtime smoke, and sandbox installer smoke passed.
• Security proof: Pillow 12.2.0 returned five matching OSV records; Pillow 12.3.0 returned none. A fresh resolution selected Pillow 12.3.0 and pyobjc-framework-Quartz 12.2.1.
• Live macOS proof on the exact candidate passed for wallpaper/theme output, display-change reapply, config and environment cache invalidation, VS Code rule preservation, and first-startup cycle behavior. Every touched preference, file, process, wallpaper assignment, and appearance setting was restored and matched its pre-test snapshot.
• Review and public gates: autoreview found no actionable findings. Privacy and Public Model Identifier Gates passed for the candidate, release notes, CI logs, source archives, and this receipt.

This is a source-only GitHub Release. No package, binary, signing, notarization, manual deployment, or manual Pages run was performed. GitHub's repository-level immutable-release feature is not enabled; no repository settings were changed. The annotated tag object, peeled commit, release title/body, latest-release routing, and source contents were verified.