0.18 released

[Jose A. Ortega Ruiz]

I've made a quick release of version 0.18, which deactivates <action>
markup in StdinReader and XmonadProp to avoid injections from funny
webpages that codify a mouse action in their titles.

Of course that's only a quick hack and not a neat solution to the
generic problem of what to do with markup in those inputs, which we're
discussing on a separtate thread.

Upgrade recommended :)

Cheers,
jao