fix: security hardening and 2.1.0 release - #415

Merged

kevincostner17 merged 17 commits into

mainfrom

security/advisory-fixes

Sep 15, 2026

Commits on Sep 15, 2026

fix(parsers): detect XML encoding and reject DTDs with an expat pass
kevincostner17
committed
8fc67cf
fix(csv): guard every header level, index labels and axis names against formulas
kevincostner17
committed
081206d
fix(duckdb): spill into a private per-run directory instead of /tmp/freshdata_spill
kevincostner17
committed
b3a5a34
fix(contracts): keyed or label-free baseline category labels
kevincostner17
committed
6bc6b83
fix(privacy): create token vault files owner-only
kevincostner17
committed
092d233
fix(privacy): random per-call key for keyless tokenize, surrogate, fpe and pseudonymize
kevincostner17
committed
cd5427f
fix(learning): mask every detected PII type in privacy='mask' profiles
kevincostner17
committed
1bf9e36
fix(enterprise): keep masked column values out of clean_enterprise reports
kevincostner17
committed
6a74471
fix(report): key the tokens that stand in for sensitive values
kevincostner17
committed
13eaeda
fix(copilot): mask every non-numeric sample column before model_context
kevincostner17
committed
53eaa9e
fix(copilot): mask sample values by column position
kevincostner17
committed
0ede986
feat(copilot): add mask_salt for a reproducible model_context
kevincostner17
committed
ac9a1d3
docs(copilot): document positional masking and mask_salt
kevincostner17
committed
cb9080e
test(truthbench): pin copilot canary scanning and sink determinism
kevincostner17
committed
640bad2
docs: changelog for the security fixes
kevincostner17
committed
50efe91
fixup(enterprise): don't apply strict column matching to report redaction
kevincostner17
committed
4b3cd9a
chore(release): 2.1.0
kevincostner17
committed
25f5a59

Navigation Menu

fix: security hardening and 2.1.0 release - #415

fix: security hardening and 2.1.0 release#415
kevincostner17 merged 17 commits into
mainfrom
security/advisory-fixes

Commits on Sep 15, 2026

fix(parsers): detect XML encoding and reject DTDs with an expat pass

fix(csv): guard every header level, index labels and axis names against formulas

fix(duckdb): spill into a private per-run directory instead of /tmp/freshdata_spill

fix(contracts): keyed or label-free baseline category labels

fix(privacy): create token vault files owner-only

fix(privacy): random per-call key for keyless tokenize, surrogate, fpe and pseudonymize

fix(learning): mask every detected PII type in privacy='mask' profiles

fix(enterprise): keep masked column values out of clean_enterprise reports

fix(report): key the tokens that stand in for sensitive values

fix(copilot): mask every non-numeric sample column before model_context

fix(copilot): mask sample values by column position

feat(copilot): add mask_salt for a reproducible model_context

docs(copilot): document positional masking and mask_salt

test(truthbench): pin copilot canary scanning and sink determinism

docs: changelog for the security fixes

fixup(enterprise): don't apply strict column matching to report redaction

chore(release): 2.1.0