diff --git a/.release-please-manifest.json b/.release-please-manifest.json
index 843e70f6e2..b55f19e916 100644
--- a/.release-please-manifest.json
+++ b/.release-please-manifest.json
@@ -1,3 +1,3 @@
 {
-  ".": "0.124.2"
+  ".": "0.125.0"
 }
diff --git a/CHANGELOG.md b/CHANGELOG.md
index a44e81756a..50a772e260 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,5 +1,12 @@
 # Changelog
 
+## [0.125.0](https://github.com/chio-labs/sqlbuild/compare/v0.124.2...v0.125.0) (2026-09-28)
+
+
+### Features
+
+* enforce custom rule hermeticity at runtime ([#868](https://github.com/chio-labs/sqlbuild/issues/868)) ([5fdb062](https://github.com/chio-labs/sqlbuild/commit/5fdb062ab8b94aa5cf9d4b9ab1278e222ebb0381))
+
 ## [0.124.2](https://github.com/chio-labs/sqlbuild/compare/v0.124.1...v0.124.2) (2026-09-28)
 
 
diff --git a/Cargo.lock b/Cargo.lock
index 4e44d9f605..440a175999 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -599,7 +599,7 @@ checksum = "f8fadd59c855ef2080decdef8ff161eb6661b86933c9d82e5ba29dc602a55aba"
 
 [[package]]
 name = "sqlbuild-rules-native"
-version = "0.124.2"
+version = "0.125.0"
 dependencies = [
  "fensu-policy",
  "globset",
diff --git a/crates/sqlbuild-rules-native/Cargo.toml b/crates/sqlbuild-rules-native/Cargo.toml
index 1b9e2ad2dd..af34c39633 100644
--- a/crates/sqlbuild-rules-native/Cargo.toml
+++ b/crates/sqlbuild-rules-native/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "sqlbuild-rules-native"
-version = "0.124.2"
+version = "0.125.0"
 edition.workspace = true
 license.workspace = true
 publish.workspace = true
diff --git a/pyproject.toml b/pyproject.toml
index d8be2928fb..9f569e751e 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -7,7 +7,7 @@ build-backend = "maturin"
 
 [project]
 name = "sqlbuild"
-version = "0.124.2"
+version = "0.125.0"
 description = "Typed, test-first SQL pipelines with local E2E testing"
 readme = "README.md"
 requires-python = ">=3.12"
diff --git a/uv.lock b/uv.lock
index d4a4fb647b..aca77fc6ba 100644
--- a/uv.lock
+++ b/uv.lock
@@ -4137,7 +4137,7 @@ wheels = [
 
 [[package]]
 name = "sqlbuild"
-version = "0.124.2"
+version = "0.125.0"
 source = { editable = "." }
 dependencies = [
     { name = "duckdb" },