Merge pull request #154 from abinaze/fix/commit6-codeql24-cve-deps

fix(deps): bump idna 3.11 → 3.18 in requirements-lock.txt

fix(deps): bump cryptography 46.0.7 → 47.0.0

fix(deps): bump transformers 4.53.1 → 4.57.6

fix(api): wrap detect_segments in try/except — closes CodeQL #24

Merge pull request #153 from abinaze/fix/accuracy-pipeline-bug

fix(ensemble): apply feedback_manager weight multipliers in combine_signals()

Merge pull request #152 from abinaze/fix/accuracy-pipeline-bugs

feat(retrain): add step8 — fit Platt after XGBoost training

feat(scripts): add fit_platt.py — standalone Platt calibration fitter

fix(health): add platt_calibration to degraded_detectors list

fix(mcmc): replace biased 1e-10 lower bound in MH acceptance draw

fix(own_embedding): wrap centroid pickle.load in try/except

fix(ensemble): log XGBoost feature-name mismatches before predict_proba

fix(ensemble): apply feedback_manager weight multipliers in combine_signals()

fix(ensemble): filter top_reasons by confidence > 0

fix(ensemble): move Platt calibration to weighted-sum fallback path only

fix(train): record cv_method and feature_names in ensemble_results.json

fix(train): pass groups=cv_groups to cross_validate

Merge pull request #151 from abinaze/fix/mypy-ini-and-lock-sync

fix: sync requirements-lock.txt diffusers/huggingface_hub/safetensors versions

fix: actually commit mypy.ini exclude pattern fix (was reverted/never applied)

Merge pull request #150 from abinaze/fix/pytest-asyncio-conflict

fix: bump safetensors 0.4.5 -> 0.8.0 for diffusers 0.38.0 compatibility (batch3 #10)

fix: bump huggingface_hub 0.30.0 -> 0.34.0 for diffusers 0.38.0 compatibility (batch3 #9)

fix: bump pytest-asyncio 0.23.8 -> 1.3.0 for pytest 9 compatibility (batch3 #8)

test: assert degraded_detectors always present in /health response (batch3 #6)

fix: CLIP placeholder init logs at ERROR not INFO; add placeholder_mode to return dict (batch3 #4)

feat: add degraded_detectors list to /health endpoint (batch3 #3)

fix: sync requirements-lock.txt to new CVE-fixed versions (batch3 #2)

fix: pin starlette/idna/Pygments CVEs; frontend HEIC, 30 signals, PDF thumbnail, error banner, 90s timeout, footer links (audit #18)

refactor: extract combine_signals() from detect() so SSE can reuse scoring without re-running detectors (audit #12)

Update README with project title and description

Remove extra newline in README.md

Remove empty lines from README.md

Merge branch 'fix/audit-all-fixes'

fix: bump fastapi to 0.115.14 (pulls starlette 0.46.2 automatically, no pin conflict); fix ci.yml coverage.xml crash

fix: guard coverage.xml parse with file-existence check (CI crash fix)

fix: guard coverage.xml parse with file-existence check (CI crash fix)

chore: add latest training artifacts and data manifests from local retrain run

fix: pin starlette/idna/Pygments CVEs; frontend HEIC, 30 signals, PDF thumbnail, error banner, 90s timeout, footer links (audit #18)

fix: Dockerfile installs from requirements.txt — fixes diffusers CVE, adds pillow-heif (audit #17)

fix: remove || true from CI lint/type/security steps so failures are visible (audit #16)

feat: add GPT-4o, Flux, Imagen3, Ideogram, Recraft generator profiles and heuristics (audit #14)

fix: SSE now runs all 30 signals exactly once; DIRE and OwnEmbedding now appear as individual streamed events (audit #13)

refactor: extract combine_signals() from detect() so SSE can reuse scoring without re-running detectors (audit #12)

fix: DIRE now encodes to VAE latent before UNet; decode after denoise; align noise timestep (audit #11)

fix: return None for corrupt images, add collate_skip_none, remove RandomGrayscale/RandomAffine (audit #10)

fix: use GroupKFold(source) instead of StratifiedKFold to prevent data leakage (audit #9)

perf: vectorize DCT radial spectrum loop with np.bincount (audit #8)