Fickling v0.1.3

What's Changed

• Make Torch an optional dependency by @suhacker1 in #95
• Bump pypa/gh-action-pypi-publish from 1.8.11 to 1.8.14 by @dependabot in #98
• Bump version number by @suhacker1 in #100

Full Changelog: v0.1.2...v0.1.3

Fickling v0.1.2

What's Changed

• Bump version number for updated Python version in build workflow

Fickling v0.1.1

What's Changed

• Update Python version in release workflow

Fickling v0.1.0

What's Changed

• Remove fickling.fickle.Pickled.check_safety() in favor of fickling.analysis.check_safety()
• Restore fickling.pickle with deprecation warning for legacy
• Introduce the polyglot module with tests and examples
• Refactor, refine, and add tests to the PyTorch module
• Add an import hook, global function hook, and context manager for malicious file detection integrations
• Refactor and add a JSON output format to the modular analysis API for usability
• Update README and examples with new features
• Include more injection methods and techniques
• Add support for OBJ, BINSTRING, and POP_MARK opcodes
• Bump pypa/gh-action-pypi-publish from 1.8.10 to 1.8.11
• Bump actions/setup-python from 4 to 5
• Bump sigstore/gh-action-sigstore-python from 2.1.0 to 2.1.1
• Bump actions/upload-artifact from 3 to 4
• Bump actions/download-artifact from 3 to 4

Full Changelog: v0.0.8...v0.1.0

Fickling v0.0.8

Refactor: the fickling.pickle module is renamed to fickling.fickle. The fickling.pickle module still works, but is deprecated and will eventually be removed from Fickling.

Fickling v0.0.7

Adds a new API call to insert a function call into a pickle that operates on the last unpickled object.

Fickling v0.0.6

Adds a modular API for analyses and analysis results, permitting sorting and filtering results.

Fickling v0.0.5

• Adds static dataflow analysis
• Improved unused variable detection checks
• Improved opcode injection
• Minor bugfixes in opcode encoding
• Fixes a bug that can result in a dirty stack after opcode injection
• Programmatic support for stacked pickle files
• Improved handling and parsing of __builtin__s

Fickling v0.0.4

Bugfix Release

Adds a workaround for an issue with a third party dependency affecting Python 3.8 and earlier.
Adds the socket module as an overtly unsafe import.

Fickling v0.0.3

Improvements to documentation and examples, as well as support for two additional pickling opcodes.