v0.18.4

[0.18.4] - 2026-04-25

CI/CD

• Expand CodeQL trigger to all branches (close Scorecard SASTID)(68c1859)
• Pin all GitHub Actions to commit SHAs(a9daca6)

Documentation

• Third-pass LF audit fixes(131e85d)
• Fix broken README doc links + promote Ingmar to Maintainer(c428566)
• LF readiness pass 2 — vendor neutrality, contributor disclosure, trademarks(e58b76c)
• readme: Add OpenSSF Best Practices passing badge(aa8e0b2)
• Correct IETF draft name — bandaid → dnsaid(b2f2a37)
• maintainers: Add Sustainability and Bus Factor disclosure(25fdc4c)
• readme: Fix broken badges + point all URLs at infobloxopen/dns-aid-core(e30fb88)

Miscellaneous

• deps: Bump softprops/action-gh-release from 2.6.2 to 3.0.0(5e7428d)

Release

• V0.18.4 — README backend table accuracy + bundle ship of source sanitization(f8beb05)