chore(release): 1.2.1

CHANGELOG.md

@@ -9,6 +9,27 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [1.2.1] - 2026-09-09
+
+### Fixed
+
+- All high-severity dependency advisories cleared (`npm audit`: 23 -> 0),
+  entirely within existing semver ranges.
+- Five further `set-state-in-effect` violations caught by the updated
+  react-hooks plugin, including search state that was cleared on every
+  keystroke below the search threshold, and an async submit guard that re-ran
+  its own effect.
+
+### Changed
+
+- In-range dependency updates, notably react 19.2 -> 19.3 and
+  `@base-ui/react` 1.2 -> 1.8.
+- `shadcn`, `tailwindcss`, `@tailwindcss/vite` and `tw-animate-css` moved to
+  devDependencies. They are build-time only - `shadcn` is a scaffolding CLI
+  with no runtime imports - but as runtime dependencies they pulled `msw`,
+  `@babel/core` and `ts-morph` into the production dependency tree that
+  vulnerability scanning reads.
+
 ## [1.2.0] - 2026-09-09
 
 ### Changed

package.json

@@ -1,7 +1,7 @@
 {
   "name": "frontend-temp",
   "private": true,
-  "version": "1.2.0",
+  "version": "1.2.1",
   "type": "module",
   "license": "MIT",
   "author": "Kevin Riehl",