chore: release v0.18.1

bumahkib7 · bumahkib7 · commit e3cf1d7b23f2 · 2026-02-06T21:37:04.000+03:00
Fix --exclude ** glob patterns, SARIF truncation safety net,
and bump codeql-action to v4.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -7,6 +7,13 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [0.18.1] - 2026-02-06
+
+### Fixed
+- `--exclude` patterns with `**` (e.g. `external/**`) now correctly match recursive directories
+- SARIF output capped at 5000 results to stay within GitHub Code Scanning limits
+- Bumped `github/codeql-action/upload-sarif` from v3 to v4
+
 ## [0.18.0] - 2026-02-06
 
 ### Added
diff --git a/Cargo.lock b/Cargo.lock
diff --git a/Cargo.toml b/Cargo.toml
@@ -15,7 +15,7 @@ members = [
 ]
 
 [workspace.package]
-version = "0.18.0"
+version = "0.18.1"
 edition = "2024"
 authors = ["Rust Monorepo Analyzer Team"]
 license = "MIT OR Apache-2.0"
diff --git a/crates/ai/Cargo.toml b/crates/ai/Cargo.toml
@@ -6,8 +6,8 @@ edition.workspace = true
 license.workspace = true
 
 [dependencies]
-rma-common = { version = "0.18.0", path = "../common" }
-rma-parser = { version = "0.18.0", path = "../parser" }
+rma-common = { version = "0.18.1", path = "../common" }
+rma-parser = { version = "0.18.1", path = "../parser" }
 anyhow.workspace = true
 thiserror.workspace = true
 tracing.workspace = true
diff --git a/crates/analyzer/Cargo.toml b/crates/analyzer/Cargo.toml
@@ -18,9 +18,9 @@ oxc = [
 ]
 
 [dependencies]
-rma-common = { version = "0.18.0", path = "../common" }
-rma-parser = { version = "0.18.0", path = "../parser" }
-rma-rules = { version = "0.18.0", path = "../rules" }
+rma-common = { version = "0.18.1", path = "../common" }
+rma-parser = { version = "0.18.1", path = "../parser" }
+rma-rules = { version = "0.18.1", path = "../rules" }
 anyhow.workspace = true
 thiserror.workspace = true
 tracing.workspace = true
diff --git a/crates/cli/Cargo.toml b/crates/cli/Cargo.toml
@@ -20,13 +20,13 @@ default = ["oxc"]
 oxc = ["rma-analyzer/oxc"]
 
 [dependencies]
-rma-common = { version = "0.18.0", path = "../common" }
-rma-parser = { version = "0.18.0", path = "../parser" }
-rma-analyzer = { version = "0.18.0", path = "../analyzer", default-features = false }
-rma-indexer = { version = "0.18.0", path = "../indexer" }
-rma-ai = { version = "0.18.0", path = "../ai" }
-rma-daemon = { version = "0.18.0", path = "../daemon" }
-rma-plugins = { version = "0.18.0", path = "../plugins" }
+rma-common = { version = "0.18.1", path = "../common" }
+rma-parser = { version = "0.18.1", path = "../parser" }
+rma-analyzer = { version = "0.18.1", path = "../analyzer", default-features = false }
+rma-indexer = { version = "0.18.1", path = "../indexer" }
+rma-ai = { version = "0.18.1", path = "../ai" }
+rma-daemon = { version = "0.18.1", path = "../daemon" }
+rma-plugins = { version = "0.18.1", path = "../plugins" }
 anyhow.workspace = true
 clap = { workspace = true, features = ["derive", "env", "string"] }
 clap_complete = "4.5"
diff --git a/crates/daemon/Cargo.toml b/crates/daemon/Cargo.toml
@@ -6,10 +6,10 @@ edition.workspace = true
 license.workspace = true
 
 [dependencies]
-rma-common = { version = "0.18.0", path = "../common" }
-rma-parser = { version = "0.18.0", path = "../parser" }
-rma-analyzer = { version = "0.18.0", path = "../analyzer" }
-rma-indexer = { version = "0.18.0", path = "../indexer" }
+rma-common = { version = "0.18.1", path = "../common" }
+rma-parser = { version = "0.18.1", path = "../parser" }
+rma-analyzer = { version = "0.18.1", path = "../analyzer" }
+rma-indexer = { version = "0.18.1", path = "../indexer" }
 anyhow.workspace = true
 thiserror.workspace = true
 tracing.workspace = true
diff --git a/crates/indexer/Cargo.toml b/crates/indexer/Cargo.toml
@@ -6,9 +6,9 @@ edition.workspace = true
 license.workspace = true
 
 [dependencies]
-rma-common = { version = "0.18.0", path = "../common" }
-rma-parser = { version = "0.18.0", path = "../parser" }
-rma-analyzer = { version = "0.18.0", path = "../analyzer" }
+rma-common = { version = "0.18.1", path = "../common" }
+rma-parser = { version = "0.18.1", path = "../parser" }
+rma-analyzer = { version = "0.18.1", path = "../analyzer" }
 anyhow.workspace = true
 thiserror.workspace = true
 tracing.workspace = true
diff --git a/crates/lsp/Cargo.toml b/crates/lsp/Cargo.toml
@@ -13,9 +13,9 @@ name = "rma-lsp"
 path = "src/main.rs"
 
 [dependencies]
-rma-common = { version = "0.18.0", path = "../common" }
-rma-parser = { version = "0.18.0", path = "../parser" }
-rma-analyzer = { version = "0.18.0", path = "../analyzer" }
+rma-common = { version = "0.18.1", path = "../common" }
+rma-parser = { version = "0.18.1", path = "../parser" }
+rma-analyzer = { version = "0.18.1", path = "../analyzer" }
 anyhow.workspace = true
 thiserror.workspace = true
 tracing.workspace = true
diff --git a/crates/parser/Cargo.toml b/crates/parser/Cargo.toml
@@ -6,7 +6,7 @@ edition.workspace = true
 license.workspace = true
 
 [dependencies]
-rma-common = { version = "0.18.0", path = "../common" }
+rma-common = { version = "0.18.1", path = "../common" }
 anyhow.workspace = true
 thiserror.workspace = true
 tracing.workspace = true
diff --git a/crates/plugins/Cargo.toml b/crates/plugins/Cargo.toml
@@ -6,7 +6,7 @@ edition.workspace = true
 license.workspace = true
 
 [dependencies]
-rma-common = { version = "0.18.0", path = "../common" }
+rma-common = { version = "0.18.1", path = "../common" }
 anyhow.workspace = true
 thiserror.workspace = true
 tracing.workspace = true
diff --git a/crates/rules/Cargo.toml b/crates/rules/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "rma-rules"
-version = "0.18.0"
+version = "0.18.1"
 edition = "2021"
 description = "Rule engine for RMA - loads and executes security rules from YAML (Semgrep-compatible)"
 license = "MIT"
@@ -9,7 +9,7 @@ build = "build.rs"
 include = ["src/**/*", "Cargo.toml", "build.rs", "rules/**/*"]
 
 [dependencies]
-rma-common = { version = "0.18.0", path = "../common" }
+rma-common = { version = "0.18.1", path = "../common" }
 serde = { version = "1.0", features = ["derive"] }
 serde_yaml = "0.9"
 serde_json = "1.0"
diff --git a/npm/package.json b/npm/package.json
@@ -1,6 +1,6 @@
 {
   "name": "rma-cli",
-  "version": "0.18.0",
+  "version": "0.18.1",
   "description": "Static security analyzer for polyglot projects (JS/TS, Python, Rust, Go, Java)",
   "keywords": [
     "security",

Original file line number	Diff line number	Diff line change
`@@ -15,7 +15,7 @@ members = [`
`15`	`15`	`]`
`16`	`16`
`17`	`17`	`[workspace.package]`
`18`		`-version = "0.18.0"`
	`18`	`+version = "0.18.1"`
`19`	`19`	`edition = "2024"`
`20`	`20`	`authors = ["Rust Monorepo Analyzer Team"]`
`21`	`21`	`license = "MIT OR Apache-2.0"`