Bump modelaudit from 0.2.42 to 0.2.52 in /services/quarantine

[dependabot]

Bumps modelaudit from 0.2.42 to 0.2.52.

Changelog

Sourced from modelaudit's changelog.

0.2.52 (2026-07-22)

Bug Fixes

• cache: retry transient identity barrier churn (#1778) (72c8d22)
• deps: update GitPython to 3.1.51 (#1774) (e9b331b)
• deps: update pyasn1 to 0.6.4 (#1772) (df81361)
• deps: update setuptools to 83.0.0 (#1773) (8c805ff)
• harden GGUF/ZIP polyglot detection (#1775) (665ed3a)
• harden LZ4-compressed Joblib inspection (#1776) (fac0ede); thanks to @​PowerliftLog for the report
• keep root-only release branches componentless (#1766) (9b8c2ce)
• picklescan: recognize uv bytes-encoded package overlays (#1777) (e9910fa)
• recover root release provenance safely (#1770) (1e0dcb6)
• resolve CodeQL quality and logging findings (#1769) (573bbd8)

0.2.51 (2026-07-20)

Bug Fixes

• recover root release build and PyPI smoke gates (#1764) (fa350d9)

0.2.50 (2026-07-20)

Security

• validate Windows MLflow staging hardlinks with native file identities so aliases outside the staging tree fail closed
• treat protocol-relative report sources as remote identifiers before any Windows UNC filesystem probe
• reject premature pickle STOP opcodes inside Joblib NumPy wrapper streams and fail closed when wrapper validation cannot complete

Bug Fixes

• cache: reuse stat without breaking public overrides (#1732) (39cd664)
• cli: handle startup interrupts gracefully (#1723) (839c7cf)
• deep-merge partial auth config updates (#1721) (8f33995)
• deps: update PyTorch to 2.13.0 for CVE-2025-3000; PyTorch-containing extras now require macOS 14 or newer on Apple Silicon and standard (GIL-enabled) CPython 3.13 or Python 3.10-3.12; CPython 3.13t is unsupported, while core-only remains available on macOS 11-13
• deps: require Click 8.3.3 or newer to address PYSEC-2026-2132
• deps: require modelaudit-picklescan>=0.1.9 so root upgrades receive the released scanner fixes
• deps: update NumPy to 2.5 on Python 3.12+ while retaining NumPy 2.4 on Python 3.11, matching NumPy's supported Python versions (#1706) (eeba9b8)
• hashing: adapt reads near scan deadlines (#1734) (f23e1c0)
• picklescan: preserve POSIX ctime checks (#1719) (cbde525)
• picklescan: resolve reviewed runtime hasattr guards without losing call-graph sinks
• picklescan: restore standalone CI (#1742) (88632fe)
• restore cross-platform nightly CI safety (#1704) (9df81da)

0.2.49 (2026-06-25)

Bug Fixes

• picklescan: restore Windows call-graph detection via cross-view stat identity (#1715) (51c0074)

... (truncated)

Commits

• 89125b5 chore: release main (#1768)
• 72c8d22 fix(cache): retry transient identity barrier churn (#1778)
• 1e0dcb6 fix: recover root release provenance safely (#1770)
• 665ed3a fix: harden GGUF/ZIP polyglot detection (#1775)
• e9910fa fix(picklescan): recognize uv bytes-encoded package overlays (#1777)
• fac0ede fix: harden LZ4-compressed Joblib inspection (#1776)
• 573bbd8 fix: resolve CodeQL quality and logging findings (#1769)
• 06acd98 test: clean up picklescan import calls (#1771)
• 8c805ff fix(deps): update setuptools to 83.0.0 (#1773)
• e9b331b fix(deps): update GitPython to 3.1.51 (#1774)
• Additional commits viewable in compare view