Kept concise: one line per release, written by hand. release-please computes the version and creates the tag and the GitHub Release from the Conventional Commits, but it does not write this file. A change is described under Unreleased; cutting a release turns that heading into the version and its date.

• Change the default nooniend listen port to 27878, the IANA user port the service is being registered for.
• Document the nooniend wire protocol in PROTOCOL.md; the README's daemon API section now points to it.
• Disclose the package's one process spawn — execFile without a shell, in nooniend only and opt-in — in SECURITY.md.

• Discovery: a peer joins the mesh only after its identity handshake, so a device that does not run nooniend is never adopted, and the sources are re-read periodically so a node joining the network is found without a restart.

• Ship mcpName so the MCP Registry can verify npm ownership.

• Release server-noonien 1.0.0: the MCP server, the noonien CLI and the nooniend daemon.