modelaudit 0.2.39__tar.gz → 0.2.40__tar.gz

{modelaudit-0.2.39 → modelaudit-0.2.40}/.github/workflows/release-please.yml

@@ -565,24 +565,24 @@ jobs:
       - name: Build standalone package sdist
         if: matrix.build-sdist == 'true'
         run: |
-          uv build --sdist --out-dir /tmp/modelaudit-picklescan-dist
+          uv build --sdist --out-dir dist
 
       - name: Build standalone package manylinux wheel
         if: runner.os == 'Linux'
         uses: PyO3/maturin-action@e83996d129638aa358a18fbd1dfb82f0b0fb5d3b # v1
         with:
           command: build
-          args: --release --out /tmp/modelaudit-picklescan-dist --compatibility manylinux_2_28
+          args: --release --out dist
           manylinux: "2_28"
           working-directory: packages/modelaudit-picklescan
 
       - name: Build standalone package wheel
         if: runner.os != 'Linux'
         run: |
-          uv build --wheel --out-dir /tmp/modelaudit-picklescan-dist
+          uv build --wheel --out-dir dist
 
       - name: Validate standalone package metadata
-        run: uvx twine check /tmp/modelaudit-picklescan-dist/*
+        run: uvx twine check dist/*
 
       - name: Verify standalone artifact version consistency
         run: |
@@ -590,10 +590,10 @@ jobs:
           EXPECTED_VERSION="${{ needs.release-please.outputs.picklescan_version }}"
 
           shopt -s nullglob
-          artifacts=(/tmp/modelaudit-picklescan-dist/modelaudit_picklescan-*.whl /tmp/modelaudit-picklescan-dist/modelaudit_picklescan-*.tar.gz)
+          artifacts=(dist/modelaudit_picklescan-*.whl dist/modelaudit_picklescan-*.tar.gz)
           if [[ ${#artifacts[@]} -eq 0 ]]; then
             echo "ERROR: Expected at least one modelaudit_picklescan artifact"
-            ls -la /tmp/modelaudit-picklescan-dist/
+            ls -la dist/
             exit 1
           fi
 
@@ -654,10 +654,10 @@ jobs:
           fi
 
           shopt -s nullglob
-          picklescan_wheels=(/tmp/modelaudit-picklescan-dist/modelaudit_picklescan-*.whl)
+          picklescan_wheels=(dist/modelaudit_picklescan-*.whl)
           if [[ ${#picklescan_wheels[@]} -ne 1 ]]; then
             echo "ERROR: Expected exactly 1 modelaudit_picklescan wheel artifact, found ${#picklescan_wheels[@]}"
-            ls -la /tmp/modelaudit-picklescan-dist/
+            ls -la dist/
             exit 1
           fi
 
@@ -685,7 +685,7 @@ jobs:
         uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
         with:
           name: modelaudit-picklescan-dist-${{ matrix.artifact-suffix }}
-          path: /tmp/modelaudit-picklescan-dist/
+          path: packages/modelaudit-picklescan/dist/
 
   publish-pypi:
     if: needs.release-please.outputs.release_created == 'true'

{modelaudit-0.2.39 → modelaudit-0.2.40}/.release-please-manifest.json

@@ -1,4 +1,4 @@
 {
-  ".": "0.2.39",
+  ".": "0.2.40",
   "packages/modelaudit-picklescan": "0.1.2"
 }

{modelaudit-0.2.39 → modelaudit-0.2.40}/CHANGELOG.md

@@ -5,6 +5,14 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [0.2.40](https://github.com/promptfoo/modelaudit/compare/v0.2.39...v0.2.40) (2026-04-17)
+
+### Bug Fixes
+
+- add manual release recovery path ([aeea2da](https://github.com/promptfoo/modelaudit/commit/aeea2da68099f42a2fae68a50fff9e64e5e2f86f))
+- avoid duplicate manylinux compatibility tag ([412677f](https://github.com/promptfoo/modelaudit/commit/412677f00e6a24b3471d9f14a36ef2b9405e5067))
+- persist manylinux picklescan artifacts ([346bb3f](https://github.com/promptfoo/modelaudit/commit/346bb3f048b646c69573812a08ffd23342843658))
+
 ## [0.2.39](https://github.com/promptfoo/modelaudit/compare/v0.2.38...v0.2.39) (2026-04-17)
 
 ### Bug Fixes

{modelaudit-0.2.39 → modelaudit-0.2.40}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: modelaudit
-Version: 0.2.39
+Version: 0.2.40
 Summary: Static scanning library for detecting malicious code, potential backdoor indicators, and other security risks in ML model files
 Project-URL: Repository, https://github.com/promptfoo/modelaudit
 Project-URL: Homepage, https://github.com/promptfoo/modelaudit

{modelaudit-0.2.39 → modelaudit-0.2.40}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "modelaudit"
-version = "0.2.39"
+version = "0.2.40"
 description = "Static scanning library for detecting malicious code, potential backdoor indicators, and other security risks in ML model files"
 authors = [
     { name = "Ian Webster", email = "ian@promptfoo.dev" },

{modelaudit-0.2.39 → modelaudit-0.2.40}/uv.lock

@@ -2395,7 +2395,7 @@ wheels = [
 
 [[package]]
 name = "modelaudit"
-version = "0.2.39"
+version = "0.2.40"
 source = { editable = "." }
 dependencies = [
     { name = "click" },