@@ -473,57 +473,57 @@ codeclone . --update-baseline
473473
474474### Overview
475475
476- This release focuses on security hardening, robustness, and long-term maintainability.
476+ This release focuses on security hardening, robustness, and long-term maintainability.
477477No breaking API changes were introduced.
478478
479479The goal of this release is to provide users with a safe, deterministic, and CI-friendly
480480tool suitable for security-sensitive and large-scale environments.
481481
482482### Security & Robustness
483483
484- - ** Path Traversal Protection**
484+ - ** Path Traversal Protection**
485485 Implemented strict path validation to prevent scanning outside the project root or
486486 accessing sensitive system directories, including macOS ` /private ` paths.
487487
488- - ** Cache Integrity Protection**
488+ - ** Cache Integrity Protection**
489489 Added HMAC-SHA256 signing for cache files to prevent cache poisoning and detect tampering.
490490
491- - ** Parser Safety Limits**
491+ - ** Parser Safety Limits**
492492 Introduced AST parsing time limits to mitigate risks from pathological or adversarial inputs.
493493
494- - ** Resource Exhaustion Protection**
494+ - ** Resource Exhaustion Protection**
495495 Enforced a maximum file size limit (10MB) and a maximum file count per scan to prevent
496496 excessive memory or CPU usage.
497497
498- - ** Structured Error Handling**
498+ - ** Structured Error Handling**
499499 Introduced a dedicated exception hierarchy (` ParseError ` , ` CacheError ` , etc.) and replaced
500500 broad exception handling with graceful, user-friendly failure reporting.
501501
502502### Performance Improvements
503503
504- - ** Optimized AST Normalization**
504+ - ** Optimized AST Normalization**
505505 Replaced expensive ` deepcopy ` operations with in-place AST normalization, significantly
506506 reducing CPU and memory overhead.
507507
508- - ** Improved Memory Efficiency**
508+ - ** Improved Memory Efficiency**
509509 Added an LRU cache for file reading and optimized string concatenation during fingerprint
510510 generation.
511511
512- - ** HTML Report Memory Bounds**
512+ - ** HTML Report Memory Bounds**
513513 HTML reports now read only the required line ranges instead of entire files, reducing peak
514514 memory usage on large codebases.
515515
516516### Architecture & Maintainability
517517
518- - ** Strict Type Safety**
518+ - ** Strict Type Safety**
519519 Migrated all optional typing to Python 3.10+ ` | None ` syntax and achieved 100% ` mypy ` strict
520520 compliance.
521521
522- - ** Modular CFG Design**
522+ - ** Modular CFG Design**
523523 Split CFG data structures and builder logic into separate modules (` cfg_model.py ` and
524524 ` cfg.py ` ) for improved clarity and extensibility.
525525
526- - ** Template Extraction**
526+ - ** Template Extraction**
527527 Extracted HTML templates into a dedicated ` templates.py ` module.
528528
529529- Added a ` py.typed ` marker for downstream type checkers.
@@ -565,13 +565,13 @@ support for Python 3.10–3.14 across the test matrix.
565565
566566### Fixed
567567
568- - ** CFG Exception Handling**
568+ - ** CFG Exception Handling**
569569 Fixed incorrect control-flow linking for ` try ` /` except ` blocks.
570570
571- - ** Pattern Matching Support**
571+ - ** Pattern Matching Support**
572572 Added missing structural handling for ` match ` /` case ` statements in the CFG.
573573
574- - ** Block Detection Scaling**
574+ - ** Block Detection Scaling**
575575 Made ` MIN_LINE_DISTANCE ` dynamic based on block size to improve clone detection accuracy
576576 across differently sized functions.
577577
@@ -581,7 +581,7 @@ support for Python 3.10–3.14 across the test matrix.
581581
582582### BREAKING CHANGES
583583
584- - ** CLI Arguments**
584+ - ** CLI Arguments**
585585 Renamed output flags for brevity and consistency:
586586 - ` --json-out ` → ` --json `
587587 - ` --text-out ` → ` --text `
0 commit comments