docs: add CHANGELOG.md for v0.1.0

Initial changelog entry covering all features, CLI commands,
and bug fixes in the first release.

Author: go-redrock-nicolas

CHANGELOG.md

@@ -0,0 +1,41 @@
+# Changelog
+
+All notable changes to license-patrol will be documented in this file.
+
+The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
+and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
+
+## [0.1.0] - 2026-03-07
+
+Initial release of license-patrol — a free, fast, CI-ready tool for scanning dependencies across any language for license compliance.
+
+### New Features
+
+- **Multi-ecosystem dependency scanning** — Automatically detect and scan dependencies across Python (pip/poetry/uv), JavaScript (npm/yarn/pnpm), Go (go.mod), Rust (Cargo), PHP (Composer), and C#/.NET (NuGet) projects.
+
+- **License resolution** — Resolve license identifiers from package registries (PyPI, npm, crates.io, pkg.go.dev, Packagist, NuGet) with concurrent async fetching for fast results.
+
+- **Configurable policy engine** — Define allow, deny, and review lists in `.license-patrol.toml` using SPDX identifiers and wildcard patterns (e.g., `BSD-*`). Includes built-in `strict` and `permissive` policies.
+
+- **Multiple output formats** — Generate reports as a rich terminal table, JSON, CSV, SPDX 2.3 tag-value SBOM, or CycloneDX 1.5 JSON BOM.
+
+- **CI integration** — Exit code 1 on policy violations, making it plug-and-play for CI pipelines. Includes a GitHub Actions workflow.
+
+- **Override system** — Manually override license metadata for packages with missing or incorrect information via the `[overrides]` section in config.
+
+- **Pre-commit hook** — `.pre-commit-hooks.yaml` included for automated license checks on every commit.
+
+### CLI Commands
+
+- `license-patrol scan` — Auto-detect ecosystems and scan for license compliance
+- `license-patrol report` — Generate SPDX, CycloneDX, JSON, or CSV compliance reports
+- `license-patrol init` — Create a `.license-patrol.toml` configuration template
+- `license-patrol version` — Display the installed version
+
+### Bug Fixes
+
+- Concurrent license resolution via `asyncio.gather` instead of serial requests
+- Removed invalid hardcoded SPDX PackageVerificationCode from SBOM output
+- Fixed `.csproj` regex to handle multiline XML attributes correctly
+
+[0.1.0]: https://github.com/nicolascorder/license-patrol/releases/tag/v0.1.0