v0.45.0

Changelog

New detectors

• 54efdf8: feat(detectors): add ClassifyVerifyHTTP helper; fix klu 5xx error semantics (#117) (@HikaruEgashira)
• 21260a4: feat(detectors): close 26 verify gaps; semantically harden 40 unverifiable detectors (#119) (@HikaruEgashira)

Engine and CLI

• 3c5ed81: feat(pii): integrate openai/privacy-filter as sibling PII engine (#110) (@HikaruEgashira)

Bug fixes

• 6a2820b: fix(detectors): drop unused tokenRe var in gitlabpipeline (staticcheck U1000) (@HikaruEgashira)
• dc38fef: fix(detectors): tighten drip/monday/make medium-priority FP patterns (#116) (@HikaruEgashira)
• d7ae852: fix(engine): close vicinity-dispatch detection gaps (PEM, paired secrets) (@HikaruEgashira)
• d893481: fix: production-ready hardening — correctness bugs, lint clean, CI gates (#118) (@HikaruEgashira)

Other

• d7fc062: build(deps): bump actions/attest-build-provenance from 1.4.4 to 4.1.0 (#114) (@dependabot[bot])
• ab95359: build(deps): bump actions/checkout from 4.2.2 to 6.0.2 (#111) (@dependabot[bot])
• fe8365b: build(deps): bump actions/setup-go from 5.1.0 to 6.4.0 (#113) (@dependabot[bot])
• b26dab1: build(deps): bump goreleaser/goreleaser-action from 6.3.0 to 7.2.2 (#115) (@dependabot[bot])
• 6001dd5: ci(workflows): set persist-credentials:false on checkout (artipacked) (@HikaruEgashira)
• 4aeb517: ci: add sisakulint workflow and dependabot config (@HikaruEgashira)
• dd5e0c6: ci: bump sisakulint-action to 8bfb339 (shlex args parsing) (@HikaruEgashira)
• 13d5626: docs(benchmarks): add cross-tool comparison vs trufflehog + gitleaks (#109) (@HikaruEgashira)
• 3be6e6a: docs(benchmarks): drop Engine shape today (not a snapshot) (@HikaruEgashira)
• 22c4ff4: docs(benchmarks): drop Next optimisation surface (not a snapshot) (@HikaruEgashira)
• a712eb6: docs(benchmarks): record full-chunk fallback cost honestly (@HikaruEgashira)
• 271b8b9: docs(benchmarks): rewrite as current-state snapshot, drop version-diff framing (@HikaruEgashira)
• d6f87a2: docs(benchmarks): rewrite to academic-rigour standard (@HikaruEgashira)
• b951f59: docs(changelog): cut v0.45.0 — verify coverage + FP hardening (@HikaruEgashira)
• 8eb6f60: docs(readme): document openai-pf engine in PII detection (opt-in) section (@HikaruEgashira)
• 9ef7394: docs: record v0.44.0 Aho-Corasick prefilter benchmark numbers (#108) (@HikaruEgashira)
• a0a1bb9: perf(engine): beat trufflehog on Workload B (8.4x) and D (1.51x) (@HikaruEgashira)
• c923fe4: perf(engine): keep only PrivateKeyPEM as FullChunkDetector (@HikaruEgashira)

---

Verify the release with:

gh attestation verify --owner plenoai pleno-dlp_{os}_{arch}.tar.gz