From e6f648c94f8ecebaa501ac96b4de75341287415e Mon Sep 17 00:00:00 2001
From: singret <100959986+singret@users.noreply.github.com>
Date: Sun, 12 Jul 2026 06:28:32 +0000
Subject: [PATCH] docs(changelog): add v1.0.1 security patch entry

---
 CHANGELOG.md | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 0e71eff..81c3fa6 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -2,6 +2,12 @@
 
 All notable changes to Fluidify Regen are documented here.
 
+## [1.0.1] — 2026-07-12
+
+### Security
+
+- **Go 1.25.12 toolchain** — resolves GO-2026-5856 (Encrypted Client Hello privacy leak in `crypto/tls`). Upgrade from v1.0.0: `docker pull ghcr.io/fluidifyai/regen:1.0.1` or `helm upgrade ... --version 1.0.1`.
+
 ## [1.0.0] — 2026-07-12
 
 First stable release. Everything you need to run production on-call and incident management, self-hosted, for free.