chore(release): prepare 1.1.0

.github/workflows/release.yml

@@ -47,7 +47,13 @@ jobs:
       - id: version
         shell: bash
         env:
+          APPLE_DEVELOPER_ID_CERTIFICATE_BASE64: ${{ secrets.APPLE_DEVELOPER_ID_CERTIFICATE_BASE64 }}
+          APPLE_DEVELOPER_ID_CERTIFICATE_PASSWORD: ${{ secrets.APPLE_DEVELOPER_ID_CERTIFICATE_PASSWORD }}
+          APPLE_NOTARY_ISSUER_ID: ${{ secrets.APPLE_NOTARY_ISSUER_ID }}
+          APPLE_NOTARY_KEY_BASE64: ${{ secrets.APPLE_NOTARY_KEY_BASE64 }}
+          APPLE_NOTARY_KEY_ID: ${{ secrets.APPLE_NOTARY_KEY_ID }}
           DRY_RUN: ${{ inputs.dry_run }}
+          NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
         run: |
           set -euo pipefail
           if [[ "$GITHUB_EVENT_NAME" == "push" ]]; then
@@ -66,6 +72,18 @@ jobs:
               echo "Release tag $version does not match npm launcher $npm_version" >&2
               exit 64
             fi
+            for required in \
+              APPLE_DEVELOPER_ID_CERTIFICATE_BASE64 \
+              APPLE_DEVELOPER_ID_CERTIFICATE_PASSWORD \
+              APPLE_NOTARY_KEY_BASE64 \
+              APPLE_NOTARY_KEY_ID \
+              APPLE_NOTARY_ISSUER_ID \
+              NPM_TOKEN; do
+              if [[ -z "${!required:-}" ]]; then
+                echo "Required release secret is missing: $required" >&2
+                exit 64
+              fi
+            done
             echo "publish=true" >> "$GITHUB_OUTPUT"
           else
             if [[ "$GITHUB_EVENT_NAME" == "workflow_dispatch" && "$DRY_RUN" != "true" ]]; then

CHANGELOG.md

@@ -18,9 +18,14 @@ Two versions travel independently, on purpose:
 
 ## [Unreleased]
 
-Everything below has landed on `main` but is **not yet in a tagged release**.
-Cutting that release is tracked in
-[#45](https://github.com/LockInTime/headless/issues/45).
+No changes yet.
+
+## [1.1.0] — 2026-08-13
+
+This release carries the roadmap work completed since v1.0.2, including
+progressive context pruning, expanded capture formats, a shared cross-engine
+core and conformance suite, trusted Chromium input, hardened distribution, and
+deeper agent-harness integration.
 
 ### Added
 
@@ -154,12 +159,12 @@ Cutting that release is tracked in
 ### Known gaps
 
 Tracked as [`backlog`](https://github.com/LockInTime/headless/labels/backlog)
-issues, grouped by roadmap phase into milestones. Highlights:
-a shutdown data race on the Linux host
-([#12](https://github.com/LockInTime/headless/issues/12)), responses that can
-exceed the 1 MiB frame ([#14](https://github.com/LockInTime/headless/issues/14)),
-and unsigned macOS builds
-([#39](https://github.com/LockInTime/headless/issues/39)).
+issues, grouped by roadmap phase into milestones. Highlights include deferred
+interaction design ([#35](https://github.com/LockInTime/headless/issues/35)),
+website and documentation depth
+([#47](https://github.com/LockInTime/headless/issues/47)–[#53](https://github.com/LockInTime/headless/issues/53)),
+and stretch Windows support
+([#56](https://github.com/LockInTime/headless/issues/56)).
 
 ## [1.0.2] — 2026-07-19
 
@@ -200,7 +205,8 @@ First tagged release: the P0–P2 contract on macOS and Linux.
 - Tag-triggered release workflow publishing a macOS app zip and Linux
   amd64/arm64 tarballs.
 
-[Unreleased]: https://github.com/LockInTime/headless/compare/v1.0.2...HEAD
+[Unreleased]: https://github.com/LockInTime/headless/compare/v1.1.0...HEAD
+[1.1.0]: https://github.com/LockInTime/headless/compare/v1.0.2...v1.1.0
 [1.0.2]: https://github.com/LockInTime/headless/compare/v1.0.1...v1.0.2
 [1.0.1]: https://github.com/LockInTime/headless/compare/v1.0.0...v1.0.1
 [1.0.0]: https://github.com/LockInTime/headless/releases/tag/v1.0.0

apps/headless/VERSION

@@ -1 +1 @@
-1.0.2
+1.1.0

apps/headless/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@headless/app",
   "private": true,
-  "version": "1.0.2",
+  "version": "1.1.0",
   "scripts": {
     "build": "./build.sh",
     "build:linux": "./build-linux.sh",

apps/web/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@headless/web",
   "private": true,
-  "version": "1.0.2",
+  "version": "1.1.0",
   "scripts": {
     "dev": "next dev",
     "build": "next build",

package.json

@@ -1,7 +1,7 @@
 {
   "name": "headless",
   "private": true,
-  "version": "1.0.2",
+  "version": "1.1.0",
   "scripts": {
     "build": "pnpm --filter @headless/app build && pnpm --filter @headless/web build",
     "build:linux": "pnpm --filter @headless/app build:linux",

packages/headless-npm/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lockintime/headless",
-  "version": "1.0.2",
+  "version": "1.1.0",
   "description": "Verified npm launcher for the Headless agent browser",
   "license": "MIT",
   "repository": {