Python: Restrict persisted checkpoint deserialization by default - #4941

Merged

Evan Mattson (moonbox3) merged 20 commits into

microsoft:mainfrom

moonbox3:agent/fix-4894-1

Apr 10, 2026

Commits on Mar 27, 2026

Harden Python checkpoint persistence defaults

Copilot
and
Copilot
committed
1c68a0f
fix: resolve mypy no-any-return error in checkpoint encoding

Copilot
and
Copilot
committed
747b1e0
Simplify find_class return in _RestrictedUnpickler (#4894)

Copilot
and
Copilot
committed
204b117
Address review feedback for #4894: Python: Harden Python checkpoint persistence defaults
Copilot
committed
3e40ec4
Restore # noqa: S301 on line 102 of _checkpoint_encoding.py (#4894)

Copilot
and
Copilot
committed
0a6a169
Address review feedback for #4894: Python: Harden Python checkpoint persistence defaults
Copilot
committed
6f9bb58
Address PR review comments on checkpoint encoding (#4894)

Copilot
and
Copilot
committed
8e4da79
Address PR #4941 review comments: fix docstring position and return type

Copilot
and
Copilot
committed
dfc8579
Address review feedback for #4894: review comment fixes
Copilot
committed
96afb37

Commits on Apr 8, 2026

Merge remote-tracking branch 'upstream/main' into agent/fix-4894-1
Copilot
committed
089fc3d
fix: use pickle.UnpicklingError in RestrictedUnpickler and improve docstring (#4894)

Copilot
and
Copilot
committed
ad2a9f6
fix: address PR #4941 review comments for checkpoint encoding

Copilot
and
Copilot
committed
f0a990b
fix: replace deprecated 'builtin' repo with pre-commit-hooks in pre-commit config

Copilot
and
Copilot
committed
363a096
style: apply pyupgrade formatting to docstring example

Copilot
and
Copilot
committed
889ad10
fix: resolve pre-commit hook paths for monorepo git root

Copilot
and
Copilot
committed
5689638

Commits on Apr 9, 2026

Merge remote-tracking branch 'upstream/main' into agent/fix-4894-1
Copilot
committed
0263504
Fix pre-commit config paths for prek --cd python execution

Copilot
and
Copilot
committed
151ab6b
fix: add builtins:getattr to checkpoint deserialization allowlist

Copilot
and
Copilot
committed
160fc2b
Address review feedback for #4894: review comment fixes
Copilot
committed
83bca52
Merge branch 'main' into agent/fix-4894-1
Evan Mattson (moonbox3)
authored
1576a46