KaifAhmad1 43b207c1c5 fix(security): address privately disclosed zip-slip, SQLi, SSRF, XSS, and SPARQLi findings ...

Fixes a set of runtime trust-boundary issues from a private security
disclosure (checkout 7c3372c0): tarball restore path traversal, latent
SQL injection in the DB exporter, a DNS-rebinding TOCTOU gap in the
shared SSRF guard, unescaped HTML in report generation, and unvalidated
SPARQL object IRIs in AnzoStore, plus several lower-severity hardening
items found in the same review.

2026-08-18 13:58:32 +05:30

..

change_management

fix: address named-graph review findings

2026-04-02 18:10:11 +05:30

conflicts

fixed qodo reviews

2026-07-31 16:05:37 +05:30

context

docs(context): fix unrunnable ContextGraph docstring example (#921)

2026-08-18 11:49:32 +05:30

cookbook

fix(kg): resolve 'unhashable type: Entity' in GraphAnalyzer #159

2026-01-08 17:23:31 +05:30

core

fix(kg): resolve 'unhashable type: Entity' in GraphAnalyzer #159

2026-01-08 17:23:31 +05:30

deduplication

test(deduplication): cover ClusterBuilder, MergeStrategyManager, and batch paths (#907)

2026-08-11 12:52:15 +05:00

embeddings

fix: resolve model switching bug and implement intrinsic dimension detection in TextEmbedder

2026-01-08 18:56:42 +05:30

explorer

fix(explorer): repair /api/enrich/extract (always 503) and the /api/decisions routes (always 500) (#886)

2026-08-15 13:48:26 +05:30

export

fix(export): harden YAML export input handling (#958)

2026-08-15 22:10:04 +05:30

graph_store

security: sanitize Cypher labels/relationship types/property keys (GHSA-482h) (#910)

2026-08-11 16:24:28 +05:30

ingest

fix(security): address privately disclosed zip-slip, SQLi, SSRF, XSS, and SPARQLi findings

2026-08-18 13:58:32 +05:30

integration

Fix LLM relation extraction parsing and add tests

2026-01-16 01:19:33 +05:30

integrations

Feat/crewai integration (#988)

2026-08-16 11:15:43 +05:00

kg

fix(kg): preserve isolated nodes in graph analytics (#1011)

2026-08-16 11:23:24 +05:00

normalize

fix(normalize): validate symbol currencies (#940)

2026-08-16 15:24:34 +05:30

ontology

test(ontology): assert ontology uri prefix is used for generated IRIs

2026-04-11 13:52:04 +05:30

parse

fix(parse): import get_progress_tracker in ExcelParser (#1016)

2026-08-16 14:07:10 +05:00

pipeline

fix(pipeline): resolve broken import and missing run() in PipelineWithProvenance (#862)

2026-08-11 16:49:54 -07:00

provenance

fix(pipeline): resolve broken import and missing run() in PipelineWithProvenance (#862)

2026-08-11 16:49:54 -07:00

reasoning

Warn and document confidence-discard behavior on rule dedup (review follow-up for #732)

2026-07-15 12:47:44 +05:30

seed

test(seed): use a real file for CSV loading (#873)

2026-08-12 17:43:10 +05:30

semantic_extract

fix(explorer): repair /api/enrich/extract (always 503) and the /api/decisions routes (always 500) (#886)

2026-08-15 13:48:26 +05:30

split

fix(split): catch broken-runtime spaCy failures in SemanticChunker

2026-08-17 13:16:17 +05:30

triplet_store

fix(triplet_store): stop CONSTRUCT detection matching inside a leading comment (#951)

2026-08-15 16:20:49 +05:00

utils

Fix flatten_dict key collisions (#1062)

2026-08-17 14:30:12 +05:00

vector_store

fix(vector_store): make VectorManager methods work on persistent backends (#855) (#914)

2026-08-13 22:42:34 +05:30

visualization

feat(kg): add KnowledgeGraph dataclass and native KGVisualizer support (#471)

2026-04-16 12:15:59 +05:30

__init__.py

fix(kg): resolve 'unhashable type: Entity' in GraphAnalyzer #159

2026-01-08 17:23:31 +05:30

_smoke_review_fixes.py

fix(explorer): make distance intelligence API calls slash-safe

2026-04-29 21:17:36 +05:00

reproduce_issue_176.py

fix(semantic-extract): resolve incomplete output #176, relax constraints, and add Groq support

2026-01-12 17:15:21 +05:30

test_030_context_graph_realworld_extended.py

test(export): guard Parquet tests on pyarrow itself, not the exporter import (#1056)

2026-08-18 02:18:39 +05:00

test_030_realworld_comprehensive.py

Improve context explainability outputs

2026-03-13 06:31:38 +05:30

test_395_temporal_semantics_comprehensive.py

fix: correct three test failures in unreleased changelog test suite

2026-04-07 17:42:08 +05:30

test_401_temporal_provenance_export.py

feat(#401): Temporal Provenance & Export (#411)

2026-03-26 12:38:24 +05:30

test_all_features.py

fix(kg): resolve 'unhashable type: Entity' in GraphAnalyzer #159

2026-01-08 17:23:31 +05:30

test_amazon_neptune.py

feat: Add Amazon Neptune Database Graph Store Support

2026-01-08 20:13:28 -05:00

test_arango_aql_exporter.py

fix: rename contributing/license pages to avoid Mintlify reserved slug conflict

2026-05-23 00:14:23 +05:30

test_arrow_exporter.py

feat: add Apache Arrow exporter

2026-02-02 22:56:53 +05:30

test_cli_commands.py

feat(cli): modern Rich terminal styling across all modules

2026-06-04 12:34:12 +05:30

test_cli_foundation.py

Fix CLI demo blockers

2026-06-16 04:43:45 +05:00

test_databricks_ingestor.py

Fix OAuth M2M auth using credentials_provider instead of unsupported client_id/client_secret kwargs for sql.connect() (addresses Codex P1)

2026-07-16 20:11:58 +05:30

test_embedding_providers.py

fix(kg): resolve 'unhashable type: Entity' in GraphAnalyzer #159

2026-01-08 17:23:31 +05:30

test_export_methods_wrapper.py

fix(kg): resolve 'unhashable type: Entity' in GraphAnalyzer #159

2026-01-08 17:23:31 +05:30

test_export_module.py

fix(cli): align export dispatch with registry contract

2026-05-29 23:45:29 +05:30

test_extractors_dispatch.py

feat: enhance semantic extraction with BYOM support, NER aggregation, RE implementation, and Triplet improvements

2026-01-24 20:53:21 +05:30

test_graph_store_methods.py

security: sanitize Cypher labels/relationship types/property keys (GHSA-482h) (#910)

2026-08-11 16:24:28 +05:30

test_graph_store.py

security: sanitize Cypher labels/relationship types/property keys (GHSA-482h) (#910)

2026-08-11 16:24:28 +05:30

test_groq_integration.py

fix(kg): resolve 'unhashable type: Entity' in GraphAnalyzer #159

2026-01-08 17:23:31 +05:30

test_hf_deep_verify.py

feat: enhance Hugging Face integration with robust BYOM support and improved triplet/relation extraction

2026-01-27 21:55:22 +05:30

test_huggingface_impl.py

feat: enhance semantic extraction with BYOM support, NER aggregation, RE implementation, and Triplet improvements

2026-01-24 20:53:21 +05:30

test_import.py

fix(kg): resolve 'unhashable type: Entity' in GraphAnalyzer #159

2026-01-08 17:23:31 +05:30

test_issue_554_fixes.py

fix(providers): address review feedback on PR #556 + changelog

2026-05-15 20:00:44 +05:30

test_llm_extraction_fixes.py

Fix critical test issues and add JenaStore empty graph tests

2026-02-02 23:50:00 +05:30

test_mcp_decisions_causal_chain.py

fix(mcp): call backend get_causal_chain only once on internal TypeError

2026-07-31 13:14:29 +05:30

test_mcp_package_version.py

fix(mcp): report package version in standalone mcp/ server too

2026-08-12 14:07:47 +05:30

test_mcp_server_version.py

fix(mcp): use semantica.__version__ as authoritative MCP version source

2026-08-12 13:56:02 +05:30

test_model_selection.py

chore: Prepare release v0.2.0

2026-01-10 23:32:10 +05:30

test_ner_configurations.py

fix: complete spaCy model cache integration

2026-08-17 12:40:10 +05:30

test_notebook_15_export.py

fix(kg): resolve 'unhashable type: Entity' in GraphAnalyzer #159

2026-01-08 17:23:31 +05:30

test_notebooks_plain.py

fix(kg): resolve 'unhashable type: Entity' in GraphAnalyzer #159

2026-01-08 17:23:31 +05:30

test_notebooks_repro.py

fix(kg): resolve 'unhashable type: Entity' in GraphAnalyzer #159

2026-01-08 17:23:31 +05:30

test_notebooks_simulation.py

fix(kg): resolve 'unhashable type: Entity' in GraphAnalyzer #159

2026-01-08 17:23:31 +05:30

test_notebooks_verification.py

fix(kg): resolve 'unhashable type: Entity' in GraphAnalyzer #159

2026-01-08 17:23:31 +05:30

test_novita_integration.py

fix: correct Entity import path in test_novita_integration

2026-03-18 00:17:08 +05:30

test_parquet_exporter.py

fix: rename contributing/license pages to avoid Mintlify reserved slug conflict

2026-05-23 00:14:23 +05:30

test_pipeline_orchestration.py

fix(kg): resolve 'unhashable type: Entity' in GraphAnalyzer #159

2026-01-08 17:23:31 +05:30

test_progress_tracker_regressions.py

tests: fix CodeQL lint in progress tracker regression tests

2026-06-16 11:03:45 +05:30

test_relations_llm.py

Fix LLM relation extraction parsing and add tests

2026-01-16 01:19:33 +05:30

test_resource_scheduler_deadlock.py

fix: use RLock in ResourceScheduler to prevent deadlock

2026-02-10 12:22:16 +05:30

test_security_regression_pr2.py

fix(security): header injection, link-prediction DoS, import ID sanitization (#912)

2026-08-12 21:14:55 +05:30

test_security_regression.py

fix: address qodo review findings on _PREFIX_DECL and query-length guard

2026-08-11 18:37:50 +05:30

test_seed_manager.py

fix(security): prevent Authorization header leakage across redirects (#947) (#1067)

2026-08-17 18:55:38 +05:30

test_semantic_extract_batch_provenance.py

chore: Prepare release v0.2.0

2026-01-10 23:32:10 +05:30

test_semantic_extract_deepdive_part2.py

fix(kg): resolve 'unhashable type: Entity' in GraphAnalyzer #159

2026-01-08 17:23:31 +05:30

test_semantic_extract_deepdive.py

fix(kg): resolve 'unhashable type: Entity' in GraphAnalyzer #159

2026-01-08 17:23:31 +05:30

test_semantic_extract_triplets.py

fix(kg): resolve 'unhashable type: Entity' in GraphAnalyzer #159

2026-01-08 17:23:31 +05:30

test_snowflake_ingestor.py

fix: address Copilot review feedback for Snowflake ingestor

2026-02-04 00:17:25 +05:30

test_unreleased_changelog_comprehensive.py

fix: correct three test failures in unreleased changelog test suite

2026-04-07 17:42:08 +05:30

verify_backends.py

fix(kg): resolve 'unhashable type: Entity' in GraphAnalyzer #159

2026-01-08 17:23:31 +05:30

verify_context_sync.py

fix(kg): resolve 'unhashable type: Entity' in GraphAnalyzer #159

2026-01-08 17:23:31 +05:30

verify_rich_cli.py

fix(cli): resolve JSON spinner leakage and cleanup review findings

2026-06-04 16:57:00 +05:30