Version 1.0.1

[bpalermo]

Changelog:

• Set the release version 1.0.1 across all modules. This PR's merge commit is the 1.0.1 release commit (manual release flow — Bookworm doesn't operate on this public repo).

What's in 1.0.1

A dependency-security patch release. Every change since 1.0.0 (#21–#24) is a CVE-clearing transitive pin over Finagle 24.2.0's frozen dependency set — no API or behavior changes:

• netty 4.1.135.Final, jackson stack 2.18.9, scala-library 2.13.16, snakeyaml 2.4, aws-sdk 1.12.797 (drops ion-java), plus plexus-utils / guava / httpclient / gson pins.
• libthrift stays 0.12.0 (scrooge 24.2.0 codegen constraint).

thrift's :midje plugin ref is intentionally held at the released 1.0.0 so this build resolves a published plugin; it moves to 1.0.1 in the follow-up next-dev PR once the 1.0.1 plugin is published.

Testing

lein midje all green at the release coordinates: core 114, http 34, thrift 13.

Post-merge (manual release)

Build from master → publish core/http/thrift/lein-finagle-clojure 1.0.1 to CodeArtifact → verify by resolution → tag 1.0.1 → next-dev 1.0.2-SNAPSHOT PR.

🤖 Generated with Claude Code

[bookworm-app]

Hi. 👋

I'm bookworm and I'll help you merge your change.

You can post a comment on this PR with one of the following commands:

bookworm/release-it

1. Add exactly one of the following labels to this PR: major, minor, patch.

2. Fill the Changelog: section of the PR description.

3. Wait until the checks have passed (except for the Bookworm check, which will be completed once the release is done).

4. Ensure someone has approved the PR.

5. Comment bookworm/release-it on this PR.

I'll take care of updating CHANGELOG.md, bumping project.clj and merging this PR.

Note: a stable version will be generated (that is Bumpito will update to it).

bookworm/release-beta

1. Add exactly one of the following labels to this PR: major, minor, patch.

2. Comment bookworm/release-beta on this PR.

I'll take care of generating a beta version based on these changes and
when it finishes I'll post a comment with the version that was generated.

bookworm/skip-release

This command should be used if you are changing something other than production code or docstrings that engineers can
see in their IDEs (e.g. README, CHANGELOG, tests, etc).

1. Wait until all the checks have passed and someone has approved the PR.

2. Comment bookworm/skip-release on this PR.

I'll take care of merging this PR.

---

If you have any problem, please reach my creators at #shared-libraries-and-tools

[Copilot]

Pull request overview

This PR cuts the 1.0.1 release commit by moving the repo and all published modules off 1.0.1-SNAPSHOT and documenting the 1.0.1 dependency-security patch contents in the changelog.

Changes:

• Bump release versions to 1.0.1 in the root project and each published module.
• Update inter-module deps (http, thrift) to depend on finagle-clojure/core "1.0.1".
• Add a 1.0.1 (2026-07-14) entry to CHANGELOG.md summarizing the dependency pin set.

Reviewed changes

Copilot reviewed 6 out of 6 changed files in this pull request and generated no comments.

Show a summary per file

File	Description
project.clj	Sets the root aggregator project version to 1.0.1.
core/project.clj	Sets finagle-clojure/core to 1.0.1.
http/project.clj	Sets finagle-clojure/http to 1.0.1 and updates its dependency on finagle-clojure/core to 1.0.1.
thrift/project.clj	Sets finagle-clojure/thrift to 1.0.1 and updates its dependency on finagle-clojure/core to 1.0.1.
lein-finagle-clojure/project.clj	Sets the Leiningen plugin version to 1.0.1.
CHANGELOG.md	Adds the 1.0.1 release notes describing the security-related dependency pins.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.