v1.0.0-rc.1: Release Candidate for GPC 1.0

[yasserstudio]

v1.0.0-rc.1 is out: the release candidate for GPC 1.0.0.

Before calling anything stable, GPC went through a full security review of every change since the last audit, plus a live run against real Play Console accounts. This release is what came out of it. If nothing critical turns up over the next two weeks, this exact build becomes 1.0.0 (earliest October 15).

Please try it in your pipelines. It ships on the normal channels (npm, Homebrew, the standalone binaries and the GPC Action), so an ordinary update gets it. If anything breaks or behaves differently than you expect, open an issue or reply here.

Check your CI: four behavior changes

• Refunds need --yes when there is no terminal. gpc purchases orders refund, orders review-refund, purchases subscription revoke and gpc external-transactions refund used to confirm themselves automatically in CI. They now stop with CONFIRMATION_REQUIRED unless you pass --yes. --dry-run never needs it.
• Vitals gates cannot pass blind. If gpc vitals cannot read your vitals (Reporting API off, no access), it now fails with exit 4 instead of printing "no data" and exiting 0. A --threshold run that gets no value back exits 6 with THRESHOLD_NO_DATA.
• Usage mistakes exit 2, as the exit-code reference always said. They exited 1 before.
• listings images sync --delete refuses an unreadable local folder instead of treating it as empty and deleting those images on Google Play.

# CI refund, now explicit
gpc purchases orders refund "GPA.1234-5678-9012-34567" --app com.example.app --yes

Also included

• gpc preflight stays within a small, fixed amount of memory on bundles with very many native libraries, and tells you when it could not check every library for 16 KB alignment.
• gpc reports download limits how large a report can grow, and a corrupt archive fails with a clear error instead of crashing.
• The refund-review token is kept out of --notify webhooks and plugin hooks.
• gpc update understands release candidates, so you will be offered 1.0.0 when it ships.
• The GPC Action (v1.1.3) now runs this build by default. Pin gpc-version: 0.9.99 if you need to hold back.

Release notes: https://github.com/yasserstudio/gpc/releases/tag/v1.0.0-rc.1

Install or update:

npm install -g @gpc-cli/cli
gpc update