chore(release): 0.18.2

.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "reflex",
-  "version": "0.18.1",
+  "version": "0.18.2",
   "description": "Prod-safe AI coding agents for infra teams: a pre-execution hook that judges each shell command by where it points and what it will change, then runs it, asks a human, or blocks it.",
   "author": {
     "name": "Ciprian Ursu",

CHANGELOG.md

@@ -6,6 +6,8 @@ All notable changes to Reflex are documented here. The format follows
 
 ## [Unreleased]
 
+## [0.18.2] - 2026-10-02
+
 ### Changed
 
 - Claude Code plugin (`plugin/`), for the plugin directory's review: the plugin never launches another agent session and never pre-answers a permission prompt.
@@ -1111,7 +1113,8 @@ Fourth review of the read-only parser (#43). Each change asks more often; none p
   and 3.12).
 - `LICENSE` (MIT), `SECURITY.md`, `CONTRIBUTING.md`, this changelog and issue templates.
 
-[Unreleased]: https://github.com/ursuciprian/reflex/compare/v0.18.1...HEAD
+[Unreleased]: https://github.com/ursuciprian/reflex/compare/v0.18.2...HEAD
+[0.18.2]: https://github.com/ursuciprian/reflex/compare/v0.18.1...v0.18.2
 [0.18.1]: https://github.com/ursuciprian/reflex/compare/v0.18.0...v0.18.1
 [0.18.0]: https://github.com/ursuciprian/reflex/compare/v0.17.1...v0.18.0
 [0.17.1]: https://github.com/ursuciprian/reflex/compare/v0.17.0...v0.17.1

action.yml

@@ -51,7 +51,7 @@ runs:
     - name: Validate the team policy
       shell: bash
       env:
-        REFLEX: npx --yes @ursuciprian/reflex@0.18.1
+        REFLEX: npx --yes @ursuciprian/reflex@0.18.2
         REFLEX_DATA_DIR: ${{ runner.temp }}/reflex
         XDG_CONFIG_HOME: ${{ runner.temp }}/reflex-config
         DIR: ${{ inputs.directory }}
@@ -80,7 +80,7 @@ runs:
       id: check
       shell: bash
       env:
-        REFLEX: npx --yes @ursuciprian/reflex@0.18.1
+        REFLEX: npx --yes @ursuciprian/reflex@0.18.2
         REFLEX_DATA_DIR: ${{ runner.temp }}/reflex
         XDG_CONFIG_HOME: ${{ runner.temp }}/reflex-config
         REFLEX_ENGINE: local
@@ -127,7 +127,7 @@ runs:
       if: inputs.golden-eval == 'true'
       shell: bash
       env:
-        REFLEX: npx --yes @ursuciprian/reflex@0.18.1
+        REFLEX: npx --yes @ursuciprian/reflex@0.18.2
         REFLEX_DATA_DIR: ${{ runner.temp }}/reflex
         XDG_CONFIG_HOME: ${{ runner.temp }}/reflex-config
         TYPESAFE_API_KEY: ${{ inputs.typesafe-api-key }}

docs/SETUP.md

@@ -584,7 +584,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4
-      - uses: ursuciprian/reflex@v0.18.1   # a release tag or a commit SHA
+      - uses: ursuciprian/reflex@v0.18.2   # a release tag or a commit SHA
         with:
           commands: |
             make deploy-staging

package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ursuciprian/reflex",
-  "version": "0.18.1",
+  "version": "0.18.2",
   "description": "Prod-safe AI coding agents for infra teams: terraform AI agent guardrails (plan-aware apply gate), AWS, kubectl and Terraform workspace context, change freezes, a team policy and a SOC 2 / ISO 27001 audit export for Claude Code, Codex CLI, opencode and pi. Pre-execution risk gate and prompt injection guard with local rules and optional TypeSafe Jev",
   "keywords": [
     "ai-coding-agents",

plugin/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "reflex",
   "displayName": "Reflex",
-  "version": "0.18.1",
+  "version": "0.18.2",
   "description": "Prod-safe AI coding agents for infra teams: a pre-execution hook that judges each shell command by where it points and what it will change, then runs it, asks a human, or blocks it.",
   "author": {
     "name": "Ciprian Ursu",

plugin/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ursuciprian/reflex",
-  "version": "0.18.1",
+  "version": "0.18.2",
   "private": true,
   "type": "module",
   "license": "MIT"