fix(security): constrain config-driven code execution - #2340

Open

XianBW (XianBW) wants to merge 12 commits into

mainfrom

security/constrain-config-execution

Commits on Sep 2, 2026

security: constrain config-driven code execution
XianBW (XianBW)
committed
babb240
fix: address security test and lint failures
XianBW (XianBW)
committed
e8c6856
ci: restore dependency and title lint compatibility
XianBW (XianBW)
committed
d32d9c6
ci: handle current MLflow and Windows OSQP changes
XianBW (XianBW)
committed
fdbc939
ci: use lxml release with cross-platform wheels
XianBW (XianBW)
committed
066586d
fix: defer optional CVXPY solver imports
XianBW (XianBW)
committed
8f9defa
style: document intentional lazy import
XianBW (XianBW)
committed
a6ceab2
ci: skip broken released OSQP on Windows Python 3.8
XianBW (XianBW)
committed
49c1f9f
test: make MLflow client timing check robust
XianBW (XianBW)
committed
06f9d1f
ci: retry nondeterministic benchmark smoke test
XianBW (XianBW)
committed
0e17df9
fix: cap filelock before fork safety regression
XianBW (XianBW)
committed
5c07604
fix: use filelock release compatible with multiprocessing
XianBW (XianBW)
committed
ee6b451