Prepared v0.10.0 release metadata

- Updated Canonical Version Metadata To v0.10.0 Across Docs And Runtime Banners
- Added The v0.10.0 Changelog Entry And Marked ROADMAP.md As Released
- Recorded The Published userland Banner Update Via The Submodule Pointer

Author: byteshiftlabs

CHANGELOG.md

@@ -5,6 +5,39 @@ All notable changes to ThunderOS will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [0.10.0] - 09/04/2026 - "System Control"
+
+### Overview
+System control release adding graceful shutdown and reboot support from user space, along with the release hardening, documentation cleanup, and security automation needed for the public ThunderOS release.
+
+### Added
+
+#### System Control (`kernel/core/syscall.c`, `kernel/arch/riscv64/core/sbi.c`, `external/userland/bin/poweroff.c`, `external/userland/bin/reboot.c`)
+- `sys_poweroff()` and `sys_reboot()` system calls
+- `poweroff` and `reboot` userland utilities
+- SBI SRST support with legacy and QEMU test-device fallbacks
+- Reliable shutdown and reboot paths for the supported QEMU environment
+
+#### Release Security and Automation
+- `SECURITY.md` vulnerability disclosure policy
+- CodeQL code scanning workflow
+- Dependency review workflow
+- Pinned documentation dependency manifest for reproducible Sphinx builds
+
+### Changed
+- Canonical version metadata updated to `0.10.0` across release-facing docs and runtime banners
+- ROADMAP now identifies `v0.10.0` as the released system-control milestone and `v0.11.0` as the next feature milestone
+- Docker documentation dependency installation now consumes `docs/requirements.txt`
+
+### Fixed
+- Clean Sphinx build on the current documentation set
+- Release-facing GitHub owner links across documentation
+- CodeQL toolchain setup for the hosted RISC-V analysis environment
+
+### Verification
+- `make clean && make -j2 && make test`
+- `make -C docs clean html SPHINXOPTS='-W --keep-going'`
+
 ## [0.9.0] - 04/12/2025 - "Synchronization"
 
 ### Overview
@@ -565,7 +598,7 @@ Fifth release of ThunderOS. Implements inter-process communication through signa
 ### Known Limitations
 - **Pipe Blocking**: Pipes are non-blocking (return EAGAIN when empty/full)
   - Proper blocking I/O requires wait queue implementation
-  - Deferred to v0.10.0 "Synchronization" release
+  - Deferred to v0.9.0 "Synchronization" release
 - **File Descriptor Inheritance**: Child processes don't inherit parent's FDs
 - **Signal Handling**: No signal handler inheritance in child processes
 

README.md

@@ -4,16 +4,13 @@ A lightweight RISC-V operating system for educational use, providing a clean fou
 
 ## Current Status
 
-**Version 0.9.0 - "Synchronization"** 🎯 Released!
+**Version 0.10.0 - "System Control"** 🎯 Released!
 
-- ✅ **v0.9.0 Released** - Blocking I/O and synchronization primitives
-- ✅ Wait queues for sleep/wakeup on blocking operations
-- ✅ Mutexes and semaphores with blocking support
-- ✅ Condition variables (wait/signal/broadcast)
-- ✅ Reader-writer locks with writer priority
-- ✅ Blocking pipes (readers sleep when empty, writers when full)
-- ✅ 62 system calls implemented
-- 🚧 **Next**: VirtIO-net driver, TCP/IP stack (v0.10.0 Networking)
+- ✅ **v0.10.0 Released** - Graceful shutdown and reboot from user space
+- ✅ `poweroff` and `reboot` utilities available in userland
+- ✅ SBI SRST support with legacy and QEMU test-device fallbacks
+- ✅ Prior process, filesystem, shell, and synchronization features remain available
+- 🚧 **Next**: VirtIO-net driver, TCP/IP stack (v0.11.0 Networking)
 
 See [CHANGELOG.md](CHANGELOG.md) for complete feature list and [ROADMAP.md](ROADMAP.md) for future plans.
 
@@ -154,7 +151,7 @@ Programs are compiled as RISC-V ELF64 executables and can be loaded from the ext
 
 - RISC-V GNU Toolchain (`riscv64-unknown-elf-gcc`)
 - QEMU 10.1.2+ RISC-V System Emulator (`qemu-system-riscv64`)
-  - OpenSBI 1.5.1+ with SSTC extension support
+  - ThunderOS uses `-bios none` on the supported QEMU path, so no OpenSBI runtime is required
   - ACLINT timer device
 - Make
 - Standard Unix utilities (bash, sed, etc.)

ROADMAP.md

@@ -446,9 +446,9 @@ Initial attempt at VirtIO block driver revealed fundamental gaps in memory infra
 
 ---
 
-## Version 0.10.0 - "System Control" 🚧 RELEASE PENDING
+## Version 0.10.0 - "System Control" ✅ RELEASED
 
-**Status:** Feature-complete on main as of February 8, 2026; public `v0.10.0` tag and GitHub Release still pending
+**Status:** Released on April 9, 2026
 
 **Focus:** System shutdown and reboot functionality
 
@@ -620,18 +620,17 @@ See `CONTRIBUTING.md` for details on how to contribute to ThunderOS development.
 
 Interested in contributing? Current priorities are:
 
-### For v0.10.0 Release Prep
-- Align public version metadata across `VERSION`, `README.md`, `CHANGELOG.md`, and runtime banners
-- Publish annotated tag `v0.10.0` and matching GitHub Release
-- Verify release notes against tested functionality on `main`
-- Re-run clean build, automated tests, and docs build from the documented environment
-
 ### For v0.11.0 - "Networking"
 - Implement VirtIO-net driver support
 - Integrate lwIP and define the socket API surface
 - Add basic networking utilities and DHCP support
 - Expand network-focused automated coverage and documentation
 
+### Release Maintenance
+- Keep `README.md`, `CHANGELOG.md`, and `ROADMAP.md` aligned with published releases
+- Expand automated coverage as new userland utilities and drivers land
+- Test supported QEMU workflows regularly and widen real-hardware validation over time
+
 See the [Issues](https://github.com/byteshiftlabs/thunderos/issues) page for specific tasks.
 
 ---

VERSION

@@ -1 +1 @@
-0.9.0
+0.10.0

docs/source/api.rst

@@ -1,7 +1,7 @@
 API Reference
 =============
 
-This document describes the public APIs available in ThunderOS v0.9.0.
+This document describes the public APIs available in ThunderOS v0.10.0.
 
 Hardware Abstraction Layer (HAL)
 ---------------------------------

docs/source/index.rst

@@ -41,9 +41,9 @@ Run in QEMU::
 Current Status
 --------------
 
-**Version 0.9.0 - "Synchronization"** ✅ RELEASED
+**Version 0.10.0 - "System Control"** ✅ RELEASED
 
-ThunderOS v0.9.0 includes blocking I/O, synchronization primitives, and 62 system calls!
+ThunderOS v0.10.0 adds graceful shutdown and reboot support while preserving the filesystem, shell, process, and synchronization capabilities from earlier releases.
 
 .. list-table::
    :header-rows: 1

docs/source/internals/syscalls.rst

@@ -8,7 +8,7 @@ System calls (syscalls) provide the interface between user-space programs and th
 
 **Current Status:**
 
-ThunderOS v0.9.0 exposes the syscall ABI defined in ``include/kernel/syscall.h``. The current surface covers process management, I/O, filesystem operations, signals, memory management, inter-process communication, synchronization primitives, networking, terminal control, file descriptor manipulation, file permissions, and system control.
+ThunderOS v0.10.0 exposes the syscall ABI defined in ``include/kernel/syscall.h``. The current surface covers process management, I/O, filesystem operations, signals, memory management, inter-process communication, synchronization primitives, networking, terminal control, file descriptor manipulation, file permissions, and system control.
 
 **Key Features:**
 

external/userland

@@ -57,7 +57,7 @@ static void shell_print_prompt(void) {
  * Print help message
  */
 static void shell_help(void) {
-    hal_uart_puts("ThunderOS Shell v0.9.0\n");
+    hal_uart_puts("ThunderOS Shell v0.10.0\n");
     hal_uart_puts("Available commands:\n");
     hal_uart_puts("  help   - Show this help message\n");
     hal_uart_puts("  clear  - Clear the screen\n");
@@ -337,7 +337,7 @@ static void shell_process_char(char input_char) {
 void shell_init(void) {
     hal_uart_puts("\n");
     hal_uart_puts("===========================================\n");
-    hal_uart_puts("  ThunderOS v0.9.0 - Interactive Shell\n");
+    hal_uart_puts("  ThunderOS v0.10.0 - Interactive Shell\n");
     hal_uart_puts("===========================================\n");
     hal_uart_puts("\n");
     hal_uart_puts("Type 'help' for available commands.\n");

kernel/core/shell.c

@@ -1600,8 +1600,8 @@ uint64_t sys_uname(utsname_t *buf) {
 
     COPY_STR(buf->sysname, "ThunderOS");
     COPY_STR(buf->nodename, "thunderos");
-    COPY_STR(buf->release, "0.9.0");
-    COPY_STR(buf->version, "v0.9.0 Synchronization");
+    COPY_STR(buf->release, "0.10.0");
+    COPY_STR(buf->version, "v0.10.0 System Control");
     COPY_STR(buf->machine, "riscv64");
 
     #undef COPY_STR