v1.9.0

• CH010 now also catches a nested def capturing a for-loop variable (the same shape as bugbear's B023's lambda case)
• CH032: default argument computed from time.time()/datetime.now()/random.random()/uuid.uuid4() etc. — evaluated once at definition time
• CH033: .strip()/.lstrip()/.rstrip() with a multi-character argument that reads as a substring mistake, not a character set — narrowed after a corpus scan showed most multi-char strip calls are deliberate (line endings, bracket/quote pairs)

Full findings and false-positive discipline: docs/FINDINGS.md