diff --git a/.release-please-manifest.json b/.release-please-manifest.json
index b05f59a8..5e39b941 100644
--- a/.release-please-manifest.json
+++ b/.release-please-manifest.json
@@ -1,3 +1,3 @@
 {
-  ".": "0.17.1"
+  ".": "0.18.0"
 }
diff --git a/CHANGELOG.md b/CHANGELOG.md
index d6930ff6..1019c9f3 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,5 +1,13 @@
 # Changelog
 
+## [0.18.0](https://github.com/mlorentedev/dotfiles/compare/v0.17.1...v0.18.0) (2026-06-25)
+
+
+### Features
+
+* **doctor:** repair auto-memory junction + OS-aware env-contract checks (HARNESS-040) ([#576](https://github.com/mlorentedev/dotfiles/issues/576)) ([6d2627c](https://github.com/mlorentedev/dotfiles/commit/6d2627cb2ac6aeb2da1b93ceeed6a150674025d7)), closes [#551](https://github.com/mlorentedev/dotfiles/issues/551)
+* **secrets:** stop ambient secret export; wrap AI CLIs via dotf secrets run ([#581](https://github.com/mlorentedev/dotfiles/issues/581)) ([e957c4f](https://github.com/mlorentedev/dotfiles/commit/e957c4f110732ba0503020a3db6d0e7433a9102b)), closes [#493](https://github.com/mlorentedev/dotfiles/issues/493)
+
 ## [0.17.1](https://github.com/mlorentedev/dotfiles/compare/v0.17.0...v0.17.1) (2026-06-24)
 
 
diff --git a/versions.conf b/versions.conf
index c563ac89..d0922c76 100644
--- a/versions.conf
+++ b/versions.conf
@@ -20,5 +20,5 @@ OPENCODE_VERSION=1.16.2
 YARN_VERSION=1.22.22
 PI_VERSION=0.79.1
 # x-release-please-start-version
-DOTF_VERSION=0.17.1
+DOTF_VERSION=0.18.0
 # x-release-please-end