task: #3621214 Release Horizon Aid 1.0.0

Plan issue: #3621214

First stable release of the Horizon Aid site template recipe.

What changes

• composer.json version 1.0.x-dev -> 1.0.0.
• All seventeen cross-dependencies back to ~1.0.0 after the Back to DEV change: the sixteen varbase_*_base recipes and drupal/vartheme_bs5_horizonaid.
• README.md badge and Composer install command -> 1.0.0.
• CHANGELOG.md entry for 1.0.0.

Why this one matters

A stock drupal/cms root ships minimum-stability: stable. While every published version was a pre-release, a site builder had to run composer config minimum-stability dev before drupal/horizonaid would resolve at all.

The version constraint was never the blocker — ~1 normalizes to a lower bound of 1.0.0.0-dev and an upper bound below 2.0.0.0, so it already admitted a pre-release once stability permitted. The stability setting was the gate. With 1.0.0 stable, composer require drupal/horizonaid works on an untouched Drupal CMS root, which is the point of the release.

Every dependency resolves to a stable

All sixteen varbase_*_base recipes now publish a stable 1.0.0, varbase_auth_base included — it was the last holdout. Vartheme BS5 Horizon Aid 1.0.0 was released first, since this recipe pins it. Each version was read from updates.drupal.org/release-history/<project>/current, not the tags API.

So a stable Horizon Aid requires no pre-release, which is what makes the stable constraint honest rather than cosmetic.

Issues released since 1.0.0-rc1

Two commits sit between 1.0.0-rc1 and this release:

• test: #3621203 Name the color-contrast and page-has-heading-one accessibility rules in the home page regression scenarios, with an explicit single-h1 assertion. Both rules had regressed on a sibling Varbase site template.
• task: #3621161 Back to DEV. Release plumbing, so it is deliberately kept out of the release notes.

Known issue shipping in this release

canvas.content_template.node.country.full binds components to fixed field deltas — field_partners at 0-3 and the two figure fields at 0-2. A Country node with fewer values throws LogicException per component, and the exception text is rendered into the visible page body for anonymous visitors. The twelve shipped demo countries all have exactly four partners and three figures, so it does not appear on the demo content; it appears when an editor creates a country. Being tracked for a follow-up release.

AI-Generated: Yes

Checkpoints:

• File an issue
• Addition/Change/Update/Fix
• Testing to ensure no regression
• Automated unit testing coverage
• Automated functional testing coverage
• UX/UI designer responsibilities
• Readability
• Accessibility
• Performance
• Security
• Developer Documentation
• User Guide Documentation
• Reviewed by human
• Code review by maintainers
• Full testing and approval
• Credit contributors
• Review with the product owner
• Release notes snippet
• Release