chore: release main

[github-actions]

🤖 I have created a release beep boop

modelaudit-picklescan: 0.1.1

0.1.1 (2026-04-17)

Features

• extract standalone pickle scanner package with parity harness (#832) (e2986cd)

Bug Fixes

• address code quality findings (#1038) (7af03cf)
• bound standalone pickle stream reads (4d0cb84)
• deps: update rust crate pyo3 to 0.28.0 (#1006) (fe93b47)
• detect hidden pytorch zip pickles (#1043) (19b6ebe)
• flag pickle persistent ids (#938) (2cfba40)
• harden pickle nested bypass detection (#1027) (c3a3b9d)
• harden standalone pickle scanner (#901) (31f7dd3)
• narrow suspicious dunder string detection (#947) (e866760)
• preserve picklescan stack state (#910) (fabac5c)

Documentation

• align markdown with current repo state (#1035) (690bc52)

---

This PR was generated with Release Please. See documentation.

[github-actions]

Workflow run and artifacts

Performance Benchmarks

Compared 19 shared benchmarks with a regression threshold of 15%.
Status: 0 regressions, 1 improved, 18 stable, 0 new, 0 missing.
Aggregate shared-benchmark median: 190.89ms -> 191.11ms (+0.1%).

Top improvements:

• tests/benchmarks/test_picklescan_benchmarks.py::test_picklescan_safe_payloads[long_benign_string] -26.0% (1.18ms -> 870.6us, long_benign_string, size=1.0 MiB, files=1)

Benchmark	Target	Size	Files	Baseline	Current	Change	Status
tests/benchmarks/test_picklescan_benchmarks.py::test_picklescan_safe_payloads[long_benign_string]	long_benign_string	1.0 MiB	1	1.18ms	870.6us	-26.0%	improved
tests/benchmarks/test_picklescan_benchmarks.py::test_picklescan_dangerous_global_payloads[malicious_reduce]	malicious_reduce	52 B	1	62.9us	60.0us	-4.7%	stable
tests/benchmarks/test_picklescan_benchmarks.py::test_picklescan_multi_stream_padded_payload	multi_stream_padded	4.1 KiB	1	108.2us	111.8us	+3.3%	stable
tests/benchmarks/test_picklescan_benchmarks.py::test_picklescan_opcode_budget_tail_payload	opcode_budget_tail	14 B	1	57.1us	55.3us	-3.2%	stable
tests/benchmarks/test_picklescan_benchmarks.py::test_picklescan_dangerous_global_payloads[stack_global]	stack_global	21 B	1	53.4us	51.7us	-3.2%	stable
tests/benchmarks/test_picklescan_benchmarks.py::test_picklescan_nested_payloads[nested_hex]	nested_hex	130 B	1	85.2us	87.8us	+3.1%	stable
tests/benchmarks/test_scan_benchmarks.py::test_validate_file_type_pytorch_zip	state_dict.pt	1.5 MiB	1	44.4us	43.1us	-2.8%	stable
tests/benchmarks/test_picklescan_benchmarks.py::test_picklescan_nested_payloads[nested_base64]	nested_base64	98 B	1	83.9us	82.1us	-2.2%	stable
tests/benchmarks/test_picklescan_benchmarks.py::test_picklescan_safe_payloads[safe_large]	safe_large	278.2 KiB	1	3.77ms	3.69ms	-2.1%	stable
tests/benchmarks/test_scan_benchmarks.py::test_scan_pytorch_zip	state_dict.pt	1.5 MiB	1	32.57ms	33.10ms	+1.6%	stable
tests/benchmarks/test_picklescan_benchmarks.py::test_picklescan_safe_payloads[safe_small]	safe_small	68 B	1	45.7us	45.1us	-1.4%	stable
tests/benchmarks/test_scan_benchmarks.py::test_skip_filter_plain_text_files	-	4.6 KiB	256	10.09ms	10.01ms	-0.8%	stable
tests/benchmarks/test_picklescan_benchmarks.py::test_picklescan_hidden_suspicious_string_budget	hidden_suspicious_string	8.0 KiB	1	586.9us	591.0us	+0.7%	stable
tests/benchmarks/test_scan_benchmarks.py::test_detect_file_format_safe_pickle	safe_model.pkl	49.4 KiB	1	24.6us	24.8us	+0.6%	stable
tests/benchmarks/test_scan_benchmarks.py::test_scan_duplicate_directory	duplicate-corpus	840.0 KiB	81	46.00ms	46.10ms	+0.2%	stable
tests/benchmarks/test_picklescan_benchmarks.py::test_picklescan_chunked_stream	chunked_stream	278.2 KiB	1	6.73ms	6.74ms	+0.1%	stable
tests/benchmarks/test_picklescan_benchmarks.py::test_picklescan_nested_payloads[nested_raw]	nested_raw	78 B	1	78.8us	78.7us	-0.1%	stable
tests/benchmarks/test_scan_benchmarks.py::test_scan_safe_pickle	safe_model.pkl	49.4 KiB	1	12.00ms	12.01ms	+0.1%	stable
tests/benchmarks/test_scan_benchmarks.py::test_scan_mixed_directory	mixed-corpus	1.7 MiB	54	77.31ms	77.35ms	+0.0%	stable

[mldangelo-oai]

Reviewed the standalone picklescan release PR after cleanup. Local validation passed: uv lock checks, ruff format/check, mypy, full non-slow/non-integration pytest, cargo check --locked, and Prettier check for release notes.

[github-actions]

🤖 Created releases:

• modelaudit-picklescan-v0.1.1

🌻