Add __version__ constant and --version CLI flag

Single source of truth for the release version, also reachable via
"python3 malicious-pdf.py --version". Lets users running from a clone
identify which release they have.

Author: jonaslejon

CHANGELOG.md

@@ -7,12 +7,20 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [1.0.1] - 2026-04-20
+
 ### Added
+- `__version__` constant in `malicious-pdf.py` and a `--version` CLI flag
+  so users running from a clone can identify the release they have.
 - `CONTRIBUTING.md` describing the contribution workflow and testing policy.
 - `CHANGELOG.md` (this file).
 - CI smoke-test workflow that runs the generator and asserts the expected
   number of PDF files is produced on every push and pull request.
 
+### Changed
+- `CLAUDE.md` documents the release process and the smoke-test count that
+  must be bumped when generators are added or removed.
+
 ## [1.0.0] - 2026-04-20
 
 First tagged release. Captures the state of the project at the time the
@@ -32,5 +40,6 @@ changelog was introduced.
 - Dependabot configuration.
 - `SECURITY.md` with PGP-encrypted private vulnerability reporting.
 
-[Unreleased]: https://github.com/jonaslejon/malicious-pdf/compare/v1.0.0...HEAD
+[Unreleased]: https://github.com/jonaslejon/malicious-pdf/compare/v1.0.1...HEAD
+[1.0.1]: https://github.com/jonaslejon/malicious-pdf/compare/v1.0.0...v1.0.1
 [1.0.0]: https://github.com/jonaslejon/malicious-pdf/releases/tag/v1.0.0

malicious-pdf.py

@@ -25,6 +25,8 @@
 import argparse
 from pathlib import Path
 
+__version__ = "1.0.1"
+
 KNOWN_SCHEMES = ('http://', 'https://', 'ftp://', 'ftps://', 'file://', 'smb://',
                   'ssh://', 'telnet://', 'gopher://', 'ldap://', 'mailto:', 'news:',
                   'nntp://', 'irc://', 'data:', 'javascript:')
@@ -4247,6 +4249,7 @@ def main():
                     "widget-based XSS, content extraction, XXE, CSP bypass, and more. "
                     "Use with Burp Collaborator or Interact.sh to detect callbacks."
     )
+    parser.add_argument("--version", action="version", version=f"%(prog)s {__version__}")
     parser.add_argument("host", help="Callback URL or IP address (e.g. https://burp-collaborator-url)")
     parser.add_argument("--output-dir", default="output", help="Directory to save generated PDF files (default: output/)")
     parser.add_argument("--no-credit", action="store_true", help="Do not embed credit/attribution metadata in generated PDFs")