release: ship 1.0.0 #463

The 1.0.0 release is prepared on main (#460): the version, the changelog under ## 1.0.0, and the Release workflow from #190. The full install matrix (E2E) and the latest-versions check passed on the release branch.

Before releasing

• Merge the last bug fixes going into 1.0. Each one adds its line under ## 1.0.0:
  • fix(docs): say why signal history is sampled before Angular 20 #462 (docs: signal history before Angular 20), merged
  • fix(forms): tag only the WebMCP call's own changes as agent, and stop flagging shared async sources #464 (forms: WebMCP agent attribution; pipes: false async duplicate warning), merged
  • fix(ui): mark guessed component sources and announce outlet nesting #465 (components: source location marked as likely; routes: outlet nesting for screen readers), merged
  • fix(overlay): keep console call sites, gate the Native profiler, skip unchanged NgRx stores #466 (overlay: console call sites, Angular Native profiler gate, NgRx skips unchanged stores), merged
  • fix(analog): scope server calls to their tab and keep the source scan #467 (analog: per-tab server calls, source scan cache), merged
  • ci: test on Windows, keep coverage and the extension zip, and check the extension panel #468 (CI: Windows tests, coverage, extension zip and axe, mobile overlay smoke tests, real-extension e2e), merged
  • fix(injectors): tell apart DI tokens that share a name #469 (injectors: DI tokens that share a name), merged
  • fix(overlay): close redaction leaks found by a leak corpus #472 (redaction leaks found by a leak corpus): CI running, merges when green

Features found in the trackers (#366–#373) ship in 1.1.0: their PRs (#470, #471, more coming) are held until 1.0.0 is published, so they don't land in the 1.0.0 tarball.

One-time setup for the Release workflow

• On npmjs.com, in the @pangular-inspector/devtools settings under Trusted publishing, add: GitHub Actions, owner pangular-inspector, repository devtools, workflow release.yml, no environment.
• Repo settings: let GitHub Actions push to main if a rule protects it, and set Actions > Workflow permissions to read and write.

Release

• Actions > Release, run on main with the exact version 1.0.0. It runs CI, checks the changelog, verifies the tarball, publishes with provenance, tags devtools@1.0.0 and creates the GitHub release. If it fails after publishing, run it again with 1.0.0. The fallback is pnpm devtools:publish (see contributing/publishing.md).

After the release

• Cloudflare (release: the Cloudflare Workers build fails on main #431): disconnect the Git build of the leftover angular-devtools Worker, or delete that Worker. "Workers Builds" fails on every PR.
• pnpm docs:deploy from main. The SEO fixes from fix(docs): give each page its own description and canonical URL, and stop layout shifts #443 and fix(docs): find image sizes for query URLs, paths with spaces and read errors #456 aren't live yet: canonical URLs, per-page descriptions, noindex on the test page, image sizes, and drop-trailing-slash in wrangler.jsonc. Spot-check a few pages for the canonical link and description. Optionally, submit the sitemap in Google Search Console.
• Extension: bump extension/manifest.json, run pnpm extension:zip, and upload it to the Chrome Web Store.
• Close chore(release): 0.0.8 #444 (replaced by chore(release): 1.0.0 #460) and docs: [pangular] Unknown option --proxyOrigin #445 (ships in 1.0.0).