[SizzleUnrlsd]

Release 0.18.0: entry points by explicit symbol with their inputs (#180), and the unreadable-template fix (#179). The Enterprise serverless-declarations plugin depends on it.

Precision

• A Django template file the analyzer cannot read no longer counts as escaping everything it renders: the flow through render_to_string stays xss, and a template extending or including it is not established either.

Plugins

• An EntryPoint may name a project function or class by its own symbol, so an integration reading a deployment declaration can make a bare Lambda handler an entry point; EntryPoint.inputs limits the parameters that are input to the given positions.

Changes

• CHANGELOG.md: Unreleased becomes 0.18.0 (2026-09-28).
• pyproject.toml, src/coretrace_python/__init__.py: 0.18.0, checked equal.
• docs/usage.md: the three version examples.
• tests/test_release.py: 0.17.0 becomes 0.18.0 on line 33 only, as authorized once fix: never assume an unreadable template file escapes #179 and feat: let an entry point name a project function by its own symbol #180 were merged.

Verification

tests/test_release.py: 2 passed. Full suite under Python 3.12.10, regression snapshots included: 1442 passed. ruff check passes.