Repository navigation

[1850] fix: Resolve security audit findings: secret redaction, trace_content gating and instrumentation crashes - #420

Open

RiyaSunil27 wants to merge 28 commits into

developfrom

fix/security-audit

Open

[1850] fix: Resolve security audit findings: secret redaction, trace_content gating and instrumentation crashes#420
RiyaSunil27 wants to merge 28 commits into
developfrom
fix/security-audit

Commits on Nov 4, 2026
- [NET-968] refactor: Remove pii detection & prompt injection detection modules (#330)
  akash-vijay-kv
  committed
  de5eb2e
- [NET-1590] fix: Add a span audio.delivery.metadata in the livekit spans to debug any issue related to audio deliver (#404)
  
  pranavcv
  authored and
  akash-vijay-kv
  committed
  261b6cc
- [3464] fix: Ensure shutdown flushes spans before absorbing LiveKit's teardown in _ShieldedTracerProvider (#419)
  
  pranavcv
  authored and
  akash-vijay-kv
  committed
  1b8f0f3
- [1981] fix: Map LiveKit ≥1.7 lk.pii.* attributes alongside the original lk.* keys (#432)
  
  pranavcv
  and
  akash-vijay-kv
  committed
  b6c739d
- [1990] fix: Refactor logging to use custom logger (#434)
  akash-vijay-kv
  committed
  86b91e7
- fix: Make the scrubber email regex linear-time (audit H-9)
  
  RiyaSunil27
  authored and
  akash-vijay-kv
  committed
  465dc49
- fix: Strip whitespace from the API key and header values (audit H-2)
  
  RiyaSunil27
  authored and
  akash-vijay-kv
  committed
  36fe8c8
- fix: Redact more credential headers, matching name parts (audit H-5)
  
  RiyaSunil27
  authored and
  akash-vijay-kv
  committed
  479c3ae
- fix: Redact secret query parameters from recorded URLs (audit H-6)
  
  RiyaSunil27
  authored and
  akash-vijay-kv
  committed
  b2de473
- fix: Stop DSPy spans exporting provider credentials (audit H-3)
  
  RiyaSunil27
  authored and
  akash-vijay-kv
  committed
  9b1d455
- fix: Remove debug print from the DSPy tool wrapper
  
  RiyaSunil27
  authored and
  akash-vijay-kv
  committed
  adbda7e
- fix: Stop openai responses.create crashing on unset reasoning (audit H-15)
  
  RiyaSunil27
  authored and
  akash-vijay-kv
  committed
  ae0eaa7
- fix: Stop LiteLLM Responses streams crashing on tool-call output (audit H-16)
  
  RiyaSunil27
  authored and
  akash-vijay-kv
  committed
  b69fe5e
- fix: Give LLM stream wrappers one hardened lifecycle (audit H-22)
  
  RiyaSunil27
  authored and
  akash-vijay-kv
  committed
  b9f57c1
- fix: Stop pydantic-ai 2.x runs crashing on result.usage() (new finding)
  
  RiyaSunil27
  authored and
  akash-vijay-kv
  committed
  ce5f300
- fix: Call the real pydantic-ai run_sync instead of replacing it (audit H-17)
  
  RiyaSunil27
  authored and
  akash-vijay-kv
  committed
  2a49c3f
- fix: Make pydantic-ai uninstrument() actually unwrap (audit M-20)
  
  RiyaSunil27
  authored and
  akash-vijay-kv
  committed
  2c7e871
- fix: End decorated spans on cancellation, Ctrl-C and sys.exit (audit H-20)
  
  RiyaSunil27
  authored and
  akash-vijay-kv
  committed
  3a01768
- fix: Keep stream spans current only while a chunk is pulled (audit H-21)
  
  RiyaSunil27
  authored and
  akash-vijay-kv
  committed
  a9c7b7a
- fix: Add session_scope and clear_session so ids can't bleed (audit H-12)
  
  RiyaSunil27
  authored and
  akash-vijay-kv
  committed
  2edb8f0
- fix: Stop the audio uploader sending after a 401 (audit H-18)
  
  RiyaSunil27
  authored and
  akash-vijay-kv
  committed
  7edb4ad
- fix: Send the audio session terminator after every chunk is answered
  
  RiyaSunil27
  authored and
  akash-vijay-kv
  committed
  64c37c1
- test: Assert audio chunk sequences by value, not arrival order
  
  RiyaSunil27
  authored and
  akash-vijay-kv
  committed
  05f2ab7
- fix: Instrument current Cohere, Mistral and Cartesia and warn when inactive (audit H-19)
  
  RiyaSunil27
  authored and
  akash-vijay-kv
  committed
  3345837
- fix: Re-raise errors from DSPy calls instead of returning None
  
  RiyaSunil27
  authored and
  akash-vijay-kv
  committed
  cb65754
- fix: Honour trace_content=False in every Netra instrumentor (audit H-4)
  
  RiyaSunil27
  authored and
  akash-vijay-kv
  committed
  904da20
- chore: Resolve merge conflicts
  
  RiyaSunil27
  authored and
  akash-vijay-kv
  committed
  47bad15
- fix: Remove unused import of os in utils.py
  akash-vijay-kv
  committed
  4f00369

Commits

Commits on Nov 4, 2026