Skip to content

Hayward 1.2.7

Choose a tag to compare

View all tags
@hedgerow-dev hedgerow-dev released this 22 Oct 09:42
v1.2.7
3920619
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Security fixes: the scanner now reads model files the way the loaders do, in places where it previously passed content clean that pickle, joblib, numpy or torch would run. This covers legacy tar checkpoints, compressed and concatenated pickle streams, .npy headers, joblib inline arrays and Python 2 global names. Upgrading is recommended.

Also includes the unreleased 1.2.6 additions: a pre-commit hook (id hayward) and an MCP server for coding agents (hayward mcp, optional extra hayward[mcp]). The core install still has one dependency.

Full details in the CHANGELOG. All 15 CI checks passed.

Assets 2
Loading