Bump version to 1.18.0

[erikdarlingdata]

Bumps the version to 1.18.0 ahead of the dev -> main release merge.

All four sources, since PlanViewer.Ssms is a legacy non-SDK project not covered by Directory.Build.props:

• src/Directory.Build.props -> 1.18.0
• src/PlanViewer.Ssms/source.extension.vsixmanifest -> 1.18.0
• src/PlanViewer.Ssms/Properties/AssemblyInfo.cs -> 1.18.0.0
• CITATION.cff -> 1.18.0

What 1.18.0 contains

Everything here is currently inert on dev - each piece only takes effect from the default branch, which is what this release accomplishes.

Tooling that switches on with this release

• Dependabot (Add Dependabot config and automated PlanShare deployment #399) - config covering all 8 project directories explicitly rather than the solution, because PlanViewer.sln omits server/PlanShare and both SSMS projects. Ignore rules encode the deliberate pins (Avalonia 12, ScottPlot 5.1.59, SkiaSharp natives, VSSDK 18.x, Velopack)
• PlanShare auto-deploy (Add Dependabot config and automated PlanShare deployment #399) - triggers on push to main touching server/PlanShare/**; backs up binary, native lib and DB, restarts, verifies through nginx, rolls back on failure. Authenticates as an unprivileged deploy user, not root
• SignPath policy + timeout (Add SignPath GitHub policy and raise the signing timeout #400) - requires GitHub-hosted runners; signing timeout raised 600s -> 1800s so a manual approval no longer has to be caught inside 10 minutes (this is what broke v1.17.0)
• PR reviewer fix (Fix PR reviewer: it was denied the tools needed to read code #401) - the reviewer was denied Read/Grep/Glob, so it burned its turns on permission denials and posted nothing

Security fixes

• Consent before executing a plan file's query (Confirm before executing a plan file's query against a server #402) - "Get Actual Plan" on a loaded plan prompted for a connection and then just ran the query. The query-session path already confirmed; this one did not, and it is the riskier of the two since the SQL comes from a .sqlplan the user opened. The dialog names the target server and database
• SSMS launcher hardening (Harden SSMS launcher: PATH search order and temp file cleanup #403) - PATH was searched before known install locations, so any writable PATH directory could hijack the launch; and every analysis left a .sqlplan containing query text in %TEMP% permanently

Verification

• Clean Release build of the merged result: 0 warnings
• 202/202 tests pass
• All four version strings at 1.18.0, no stale 1.17.0 anywhere
• vsixmanifest matches, so the VSIX version-mismatch warning in release.yml will not fire
• SSMS VSIX built locally with MSBuild (CI never compiles it; release.yml builds it under continue-on-error)

Note for the release run

SignPath only offers manual approval, so this release will pause at the signing step and needs approving in the SignPath dashboard. The window is now 30 minutes rather than 10.

🤖 Generated with Claude Code