diff --git a/CHANGELOG.md b/CHANGELOG.md
index 93379ab..775bbb7 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,5 +1,10 @@
 # Changelog
 
+## 18.0.1
+The session replay buffer is now capped by size as well as by time (about 10 MB of events, on top of the existing three 5-minute checkpoints). When it grows past that, the oldest checkpoints are dropped first; if a single checkpoint outgrows the budget on a page that re-renders constantly, a fresh checkpoint replaces it (at most every 30 seconds), so the most recent activity is always kept. This bounds the memory the recorder holds in the host page and the size of the report upload.
+A report that the API (or a proxy in front of it) rejects as too large (HTTP 413) is no longer lost: it is resent without the session replay, and if needed without screenshot data and network logs.
+Added support for authenticated conversation files (opt-in per project): after a server-verified `identify`, the SDK hands a short-lived file session to the messenger, refreshes it while active, keeps it only for the same identity and revokes it on logout. Projects that have not enabled the setting are unaffected.
+
 ## 18.0.0
 No breaking changes: major version aligned across all Gleap SDKs for the data-region release. Without `Gleap.setRegion` the SDK behaves exactly as 17.x (EU hosts).
 
diff --git a/package-lock.json b/package-lock.json
index d418380..a9838f9 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -1,12 +1,12 @@
 {
   "name": "gleap",
-  "version": "18.0.0",
+  "version": "18.0.1",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "gleap",
-      "version": "18.0.0",
+      "version": "18.0.1",
       "license": "Commercial",
       "dependencies": {
         "@floating-ui/dom": "^1.7.5",
diff --git a/package.json b/package.json
index a61afb6..c445e2f 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "gleap",
-  "version": "18.0.0",
+  "version": "18.0.1",
   "main": "build/cjs/index.js",
   "module": "build/esm/index.mjs",
   "exports": {