fix(security)!: harden artifact serialization and loading - #2339

Open

XianBW (XianBW) wants to merge 28 commits into

mainfrom

security/harden-artifact-loading

Commits on Sep 2, 2026

security: harden artifact serialization and loading
XianBW (XianBW)
committed
7b8ed84
ci: restore dependency and title lint compatibility
XianBW (XianBW)
committed
9dfc90c
fix: address artifact test and lint failures
XianBW (XianBW)
committed
4fd5692
ci: handle current MLflow and Windows OSQP changes
XianBW (XianBW)
committed
6e4868a
ci: use lxml release with cross-platform wheels
XianBW (XianBW)
committed
4633601
fix: defer optional CVXPY solver imports
XianBW (XianBW)
committed
af84e2b
docs: mark notebook model artifacts as trusted
XianBW (XianBW)
committed
b11f268
docs: mark position artifacts as trusted
XianBW (XianBW)
committed
2d5f670
style: document intentional lazy import
XianBW (XianBW)
committed
d4a02ea
ci: skip broken released OSQP on Windows Python 3.8
XianBW (XianBW)
committed
93bf31b
fix: mark online model artifacts as trusted
XianBW (XianBW)
committed
c973fdb
test: make MLflow client timing check robust
XianBW (XianBW)
committed
ee4ac56
ci: retry nondeterministic benchmark smoke test
XianBW (XianBW)
committed
9433d88
fix: cap filelock before fork safety regression
XianBW (XianBW)
committed
5065bb8
fix: use filelock release compatible with multiprocessing
XianBW (XianBW)
committed
9d8d63d

Commits on Sep 16, 2026

Commits on Sep 17, 2026

fix(security): require explicit trust in artifact workflows

XianBW (XianBW)
and
Copilot
committed
1039e70
test(workflow): cover complete DDG-DA and HIST artifact flows

XianBW (XianBW)
and
Copilot
committed
0296368

Commits on Sep 21, 2026

fix(security)!: unify artifact trust and publish upgrade guidance

XianBW (XianBW)
and
Copilot
committed
9936463
fix(security): remove trial-only trust compatibility

XianBW (XianBW)
and
Copilot
committed
4a80d69
ci: avoid failed dataset probes and space download retries

XianBW (XianBW)
and
Copilot
committed
f1958d5
docs: add practical artifact migration examples

XianBW (XianBW)
and
Copilot
committed
349e57a

Commits on Sep 22, 2026

fix(workflow): preserve fresh artifact workflows with scoped trust

XianBW (XianBW)
and
Copilot
committed
001b8f1