[socket-release-bot]

Bumps package.json to 1.10.0 and moves the ## [Unreleased] notes under the 1.10.0 heading.

To release:

1. Review the CHANGELOG section and squash-merge this PR.
2. Dispatch Publish to npm registry on v1.x with dry-run: false. It tags the merge commit, cuts the GitHub release, and stages all three packages.
3. Approve each staged package with pnpm stage approve.

If v1.x moves before this merges, re-dispatch with mode: release-pr to rebuild the bump on the new tip.

---

Note

Low Risk
Version and changelog-only release bump with no runtime code changes in this PR.

Overview
Release 1.10.0 — bumps the root package.json version from 1.9.1 to 1.10.0 and retitles the changelog’s ## [Unreleased] section to 1.10.0 (2026-10-22) with the GitHub release link.

No application code changes; this PR only cuts the release metadata. The promoted notes describe what ships in 1.10.0: --ignore-unresolved for socket manifest dynamic-sbom-inference, JVM unresolved-dependency handling and messaging for Maven/Gradle/sbt, socket.json verbose for --dynamic-sbom-inference, and CLI warnings when scan commands ignore flags that come from socket.json.

^{Reviewed by Cursor Bugbot for commit 43044e1. Configure here.}