v2.0.73

v2.0.73

What's Changed

• fix(guard): catch pathlib method aliases (b7bb274)
• fix(guard): fail closed on mixed command variants (9d681f5)
• style(guard): match cli command formatting (5c55ace)
• fix(guard): harden interpreter heredoc checks (5d7d511)
• fix(guard): trust process cwd for copilot hooks (ced11f5)
• fix(guard): tighten workspace and link detection (220ddb1)
• fix(guard): constrain runtime workspace roots (2ae4abe)
• fix(guard): tighten copilot benign fallback (42da9d7)
• fix(guard): restore python heredoc matching (598d293)
• fix(guard): gate unmodeled interpreter eval (11433bb)
• fix(guard): catch pathlib mutator methods (cc776db)
• fix(guard): catch imported subprocess helpers (d4f9fac)
• fix(guard): preserve policy literals in redaction (600e9da)
• fix(guard): catch pathlib write shortcuts (95c5050)
• fix(guard): tighten scanner review fixes (5df004b)
• fix(guard): close review gaps (905b921)
• fix(guard): harden approvals and review UX (bcc0102)

Installation

Base install:

uv tool install hol-guard==2.0.73

uv tool install plugin-scanner==2.0.73

Full Cisco coverage on Python 3.11+:

uv tool install "hol-guard[cisco]==2.0.73"

uv tool install "plugin-scanner[cisco]==2.0.73"

docker pull ghcr.io/hashgraph-online/ai-plugin-scanner:2.0.73

Full Changelog: v2.0.72...v2.0.73