#466 chore(release): v0.18.2 — friction-reduction patch

[Anonymous]

Originally created by: fu351

v0.18.2 — friction-reduction patch

Cuts the current Unreleased section into v0.18.2 and bumps pyproject.toml (0.18.1 → 0.18.2).

Headline (why this is a patch worth shipping now)

The secret detector was firing spurious approval prompts on ordinary identifiers, paths, and UUIDs — the biggest source of click-through fatigue and a real churn factor. This release fixes that (raise-only: every real credential still fires) and makes the rule self-check at import and fail closed if it's ever broken. See [#464].

What's in it

• Weak-secret false positives on ids/paths/UUIDs fixed; rule self-checks (#464).
• Opt-in anonymous CLI telemetry and the docs rewrite + docs site from the last cycle (already merged, released here).
• The smaller items already in Unreleased (dashboard per-project tab title, the [#399] macOS GUI-dialog thread-safety fix, the river cap).

Verification

• main is green (the FP fix landed via [#464] with full CI green).
• Synthetic benchmark re-run (--suite synthetic --profile before_after): attacks_stopped = 1.0, unchanged — the fix only removes false AUTH prompts on benign shapes and touches no BLOCK verdict, so detection is unaffected. No BENCHMARKS.md change needed.

Release (after merge)

gh release create v0.18.2 → the publish.yml OIDC Trusted-Publishing flow builds + uploads to PyPI, gated by the pypi GitHub Environment's human approval.

🤖 Generated with Claude Code

[Anonymous]

Ticket changed by: fu351

• status: open --> closed