diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
new file mode 100644
index 0000000..1c6e0a4
--- /dev/null
+++ b/.github/workflows/publish.yml
@@ -0,0 +1,33 @@
+name: Publish to npm
+
+on:
+  push:
+    tags:
+      - "v*.*.*"
+  workflow_dispatch:
+
+permissions:
+  id-token: write
+
+jobs:
+  publish:
+    runs-on: ubuntu-latest
+    environment: Publish
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Set up Node
+        uses: actions/setup-node@v4
+        with:
+          node-version: 24
+          registry-url: https://registry.npmjs.org
+
+      - name: Install dependencies
+        run: npm ci
+
+      - name: Build
+        run: npm run build
+
+      - name: Publish
+        run: npm publish --access public
diff --git a/CHANGELOG.md b/CHANGELOG.md
index cea4bd7..482a12b 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -4,6 +4,16 @@ All notable changes to this project will be documented in this file.
 
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/).
 
+## [1.0.0] - 2026-08-08
+
+### Added
+
+- CI workflow (`ci.yml`): runs typecheck, tests, and format checks on push/PR across Node 20/22/24.
+
+### Changed
+
+- First stable release - no functional changes from `0.1.0`.
+
 ## [0.1.0] - 2026-08-08
 
 ### Added
diff --git a/package-lock.json b/package-lock.json
index 134749b..294b346 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -1,12 +1,12 @@
 {
   "name": "zod-cli-flags",
-  "version": "0.1.0",
+  "version": "1.0.0",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "zod-cli-flags",
-      "version": "0.1.0",
+      "version": "1.0.0",
       "license": "MIT",
       "devDependencies": {
         "@types/node": "^22",
diff --git a/package.json b/package.json
index e91be14..681c798 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "zod-cli-flags",
-  "version": "0.1.0",
+  "version": "1.0.0",
   "description": "Define a CLI's flags as a single Zod schema and parse argv into a typed result.",
   "type": "module",
   "main": "./dist/index.js",