chore: release main

[github-actions]

🤖 I have created a release beep boop

0.2.44

0.2.44 (2026-05-03)

Bug Fixes

• address ai quality findings (#1218) (30f4ef2)
• clear remaining security-quality findings (#1219) (259f931)

Performance Improvements

• add opt-in core phase timings (#1170) (75a7f0b)
• bound directory progress pre-counts (#1174) (23dc5d0)
• bound ordinary license header reads (#1197) (113ad34)
• cache call graph call nodes (#1215) (aa52759)
• cache function import aliases (#1214) (d56eef2)
• cache manifest trusted-url lookups (#1186) (09e76cf)
• cache parameter controlled names (#1213) (41b8f45)
• cache scanner selection policies (#1177) (371f480)
• cache split call graph names (#1212) (77ab177)
• dedupe repeated metadata urls (#1166) (b3f1009)
• reuse cache key content hash on store (#1171) (e3981bd)
• reuse call graph controlled names (#1198) (84e6a9b)
• reuse call graph module parses (#1167) (0822b40)
• reuse compiled pmml extension patterns (#1172) (51ddc85)
• reuse default secret regexes (#1185) (b5ba149)
• reuse flax layer keyword text (#1187) (b50947f)
• reuse flax structure analysis (#1188) (c33c566)
• reuse flax suspicious patterns (#1194) (0351de1)
• reuse hashes for hardlinked files (#1175) (aac4367)
• reuse jax probe file handle (#1161) (3e95649)
• reuse jinja scanner patterns (#1184) (bb5a729)
• reuse jit import regexes (#1190) (9f37f5d)
• reuse lowered blacklist payload (#1165) (624a17b)
• reuse lowered c2 payload scan (#1163) (a63efaa)
• reuse lowered flax transform values (#1169) (3d73ad7)
• reuse lowered get_file values (#1211) (3bc7890)
• reuse lowered hex token seed checks (#1202) (8a34db9)
• reuse lowered jax context text (#1164) (d012c09)
• reuse lowered keras metadata text (#1168) (abfe87b)
• reuse lowered layer type names (#1203) (4b94a67)
• reuse lowered license header text (#1162) (447ea66)
• reuse lowered metadata filenames (#1205) (4251df5)
• reuse lowered metadata keys (#1206) (3ea11f0)
• reuse lowered ml operation names (#1201) (c5de398)
• reuse lowered sarif messages (#1209) (fde43a4)
• reuse lowered secret descriptions (#1208) (cb0324b)
• reuse lowered skops member names (#1207) (879c531)
• reuse lowered xgboost legacy headers (#1204) (8bc1e7d)
• reuse manifest text within scans (#1160) (848bc1e)
• reuse metagraph attr lowercase values (#1200) (349751e)
• reuse nearby license discovery (#1155) (301618d)
• reuse network library patterns (#1191) (630bd3d)
• reuse normalized scanner selection policy (#1153) (b8430a0)
• reuse onnx model bytes for parsing (#1193) (a5356a5)
• reuse prefiltered sarif issues (#1210) (d996043)
• reuse savedmodel function patterns (#1183) (c043bcd)
• reuse secrets detector heuristics (#1189) (799e8bf)
• reuse sibling license directory listings (#1157) (5ec7f21)
• reuse suspicious port names (#1192) (8ed7665)
• share call graph caches within reports (#1156) (b16d37c)
• share getattr assignment candidates (#1199) (5d12903)
• short-circuit hf bookkeeping checks (#1154) (ed0122d)
• skip call graph enrichment in pickle validation (#1196) (2347d80)
• skip directory pre-count without progress (#1173) (83c8bb4)
• skip redundant jax scans for plain pickles (#1158) (04c6974)
• skip renormalizing scanner selection (#1181) (74ac7a7)
• summarize CLI progress tree once (#1182) (0bc373f)

Documentation

• add performance audit backlog (#1159) (be6cc4a)

modelaudit-picklescan: 0.1.5

0.1.5 (2026-05-03)

Bug Fixes

• address ai quality findings (#1218) (30f4ef2)
• clear remaining security-quality findings (#1219) (259f931)

Performance Improvements

• cache call graph call nodes (#1215) (aa52759)
• cache function import aliases (#1214) (d56eef2)
• cache parameter controlled names (#1213) (41b8f45)
• cache split call graph names (#1212) (77ab177)
• reuse call graph controlled names (#1198) (84e6a9b)
• reuse call graph module parses (#1167) (0822b40)
• share call graph caches within reports (#1156) (b16d37c)
• share getattr assignment candidates (#1199) (5d12903)
• skip call graph enrichment in pickle validation (#1196) (2347d80)

---

This PR was generated with Release Please. See documentation.

[chatgpt-codex-connector]

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: e8881bf7d7

ℹ️ About Codex in GitHub

Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".

[chatgpt-codex-connector]

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 65a289030e

ℹ️ About Codex in GitHub

Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".

[chatgpt-codex-connector]

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: fbd3efeb5c

ℹ️ About Codex in GitHub

Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".

[chatgpt-codex-connector]

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: f9208fe0c5

ℹ️ About Codex in GitHub

Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".

[chatgpt-codex-connector]

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 229a7f4efc

ℹ️ About Codex in GitHub

Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".

[chatgpt-codex-connector]

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 039b3a33d4

ℹ️ About Codex in GitHub

Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".

[github-actions]

Workflow run and artifacts

Performance Benchmarks

Compared 19 shared benchmarks with a regression threshold of 15%.
Status: 0 regressions, 1 improved, 18 stable, 0 new, 0 missing.
Aggregate shared-benchmark median: 354.46ms -> 358.52ms (+1.1%).

Top improvements:

• tests/benchmarks/test_picklescan_benchmarks.py::test_picklescan_safe_payloads[long_benign_string] -30.7% (1.05ms -> 730.8us, long_benign_string, size=1.0 MiB, files=1)

Benchmark	Target	Size	Files	Baseline	Current	Change	Status
tests/benchmarks/test_picklescan_benchmarks.py::test_picklescan_safe_payloads[long_benign_string]	long_benign_string	1.0 MiB	1	1.05ms	730.8us	-30.7%	improved
tests/benchmarks/test_picklescan_benchmarks.py::test_picklescan_nested_payloads[nested_hex]	nested_hex	130 B	1	133.6us	141.1us	+5.6%	stable
tests/benchmarks/test_scan_benchmarks.py::test_detect_file_format_safe_pickle	safe_model.pkl	49.4 KiB	1	30.8us	32.1us	+4.2%	stable
tests/benchmarks/test_picklescan_benchmarks.py::test_picklescan_dangerous_global_payloads[malicious_reduce]	malicious_reduce	52 B	1	374.8us	389.3us	+3.9%	stable
tests/benchmarks/test_picklescan_benchmarks.py::test_picklescan_safe_payloads[safe_large]	safe_large	278.2 KiB	1	14.50ms	15.05ms	+3.7%	stable
tests/benchmarks/test_scan_benchmarks.py::test_scan_pytorch_zip	state_dict.pt	1.5 MiB	1	29.91ms	30.91ms	+3.4%	stable
tests/benchmarks/test_picklescan_benchmarks.py::test_picklescan_chunked_stream	chunked_stream	278.2 KiB	1	17.57ms	18.15ms	+3.3%	stable
tests/benchmarks/test_picklescan_benchmarks.py::test_picklescan_nested_payloads[nested_base64]	nested_base64	98 B	1	128.1us	131.8us	+2.9%	stable
tests/benchmarks/test_picklescan_benchmarks.py::test_picklescan_safe_payloads[safe_small]	safe_small	68 B	1	77.4us	75.2us	-2.8%	stable
tests/benchmarks/test_picklescan_benchmarks.py::test_picklescan_opcode_budget_tail_payload	opcode_budget_tail	14 B	1	93.2us	91.0us	-2.4%	stable
tests/benchmarks/test_picklescan_benchmarks.py::test_picklescan_nested_payloads[nested_raw]	nested_raw	78 B	1	122.6us	125.4us	+2.2%	stable
tests/benchmarks/test_scan_benchmarks.py::test_validate_file_type_pytorch_zip	state_dict.pt	1.5 MiB	1	51.3us	52.4us	+2.1%	stable
tests/benchmarks/test_picklescan_benchmarks.py::test_picklescan_hidden_suspicious_string_budget	hidden_suspicious_string	8.0 KiB	1	620.5us	608.4us	-2.0%	stable
tests/benchmarks/test_scan_benchmarks.py::test_scan_duplicate_directory	duplicate-corpus	840.0 KiB	81	191.45ms	193.18ms	+0.9%	stable
tests/benchmarks/test_scan_benchmarks.py::test_scan_mixed_directory	mixed-corpus	1.7 MiB	54	72.97ms	73.57ms	+0.8%	stable
tests/benchmarks/test_picklescan_benchmarks.py::test_picklescan_dangerous_global_payloads[stack_global]	stack_global	21 B	1	327.4us	329.7us	+0.7%	stable
tests/benchmarks/test_picklescan_benchmarks.py::test_picklescan_multi_stream_padded_payload	multi_stream_padded	4.1 KiB	1	440.1us	442.4us	+0.5%	stable
tests/benchmarks/test_scan_benchmarks.py::test_skip_filter_plain_text_files	-	4.6 KiB	256	13.64ms	13.58ms	-0.5%	stable
tests/benchmarks/test_scan_benchmarks.py::test_scan_safe_pickle	safe_model.pkl	49.4 KiB	1	10.94ms	10.94ms	-0.1%	stable

[github-actions]

🤖 Created releases:

• v0.2.44
• modelaudit-picklescan-v0.1.5

🌻