v0.45.0
Changelog
New detectors
- 54efdf8: feat(detectors): add ClassifyVerifyHTTP helper; fix klu 5xx error semantics (#117) (@HikaruEgashira)
- 21260a4: feat(detectors): close 26 verify gaps; semantically harden 40 unverifiable detectors (#119) (@HikaruEgashira)
Engine and CLI
- 3c5ed81: feat(pii): integrate openai/privacy-filter as sibling PII engine (#110) (@HikaruEgashira)
Bug fixes
- 6a2820b: fix(detectors): drop unused tokenRe var in gitlabpipeline (staticcheck U1000) (@HikaruEgashira)
- dc38fef: fix(detectors): tighten drip/monday/make medium-priority FP patterns (#116) (@HikaruEgashira)
- d7ae852: fix(engine): close vicinity-dispatch detection gaps (PEM, paired secrets) (@HikaruEgashira)
- d893481: fix: production-ready hardening — correctness bugs, lint clean, CI gates (#118) (@HikaruEgashira)
Other
- d7fc062: build(deps): bump actions/attest-build-provenance from 1.4.4 to 4.1.0 (#114) (@dependabot[bot])
- ab95359: build(deps): bump actions/checkout from 4.2.2 to 6.0.2 (#111) (@dependabot[bot])
- fe8365b: build(deps): bump actions/setup-go from 5.1.0 to 6.4.0 (#113) (@dependabot[bot])
- b26dab1: build(deps): bump goreleaser/goreleaser-action from 6.3.0 to 7.2.2 (#115) (@dependabot[bot])
- 6001dd5: ci(workflows): set persist-credentials:false on checkout (artipacked) (@HikaruEgashira)
- 4aeb517: ci: add sisakulint workflow and dependabot config (@HikaruEgashira)
- dd5e0c6: ci: bump sisakulint-action to 8bfb339 (shlex args parsing) (@HikaruEgashira)
- 13d5626: docs(benchmarks): add cross-tool comparison vs trufflehog + gitleaks (#109) (@HikaruEgashira)
- 3be6e6a: docs(benchmarks): drop Engine shape today (not a snapshot) (@HikaruEgashira)
- 22c4ff4: docs(benchmarks): drop Next optimisation surface (not a snapshot) (@HikaruEgashira)
- a712eb6: docs(benchmarks): record full-chunk fallback cost honestly (@HikaruEgashira)
- 271b8b9: docs(benchmarks): rewrite as current-state snapshot, drop version-diff framing (@HikaruEgashira)
- d6f87a2: docs(benchmarks): rewrite to academic-rigour standard (@HikaruEgashira)
- b951f59: docs(changelog): cut v0.45.0 — verify coverage + FP hardening (@HikaruEgashira)
- 8eb6f60: docs(readme): document openai-pf engine in PII detection (opt-in) section (@HikaruEgashira)
- 9ef7394: docs: record v0.44.0 Aho-Corasick prefilter benchmark numbers (#108) (@HikaruEgashira)
- a0a1bb9: perf(engine): beat trufflehog on Workload B (8.4x) and D (1.51x) (@HikaruEgashira)
- c923fe4: perf(engine): keep only PrivateKeyPEM as FullChunkDetector (@HikaruEgashira)
Verify the release with:
gh attestation verify --owner plenoai pleno-dlp_{os}_{arch}.tar.gz