Release 2.2.362 / 0.0.58 (#1907)

* Initial plan * Update CHANGELOG.md unreleased section with unified dependabot entry Co-authored-by: SharonHart <15013757+SharonHart@users.noreply.github.com> * Bump versions to 2.2.362 / 0.0.58 and update CHANGELOG Co-authored-by: SharonHart <15013757+SharonHart@users.noreply.github.com> * Revert CHANGELOG.md to [unreleased] as requested Co-authored-by: SharonHart <15013757+SharonHart@users.noreply.github.com> * Promote [unreleased] to [2.2.362] keeping individual entry descriptions Co-authored-by: SharonHart <15013757+SharonHart@users.noreply.github.com> * Update presidio PyPI meta-package changelog entry with attribution Co-authored-by: SharonHart <15013757+SharonHart@users.noreply.github.com> * Update CHANGELOG.md version comparison links for 2.2.362 Co-authored-by: SharonHart <15013757+SharonHart@users.noreply.github.com> --------- Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com> Co-authored-by: SharonHart <15013757+SharonHart@users.noreply.github.com>
2026-07-23 11:20:55 -05:00 · 2026-03-15 14:24:59 +02:00
parent 9ef83c3a58
commit 97ffb3a79d
5 changed files with 43 additions and 15 deletions
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,22 +3,49 @@
 All notable changes to this project will be documented in this file.

 ## [unreleased]
+
+## [2.2.362] - 2026-03-15
 ### General
 #### Added
- Published `presidio` as a PyPI meta-package that installs `presidio-analyzer` and `presidio-anonymizer`, making `pip install presidio` work as expected. Inspired by and thanks to Sakthi Santhosh Anumand and Harsha Vardhan for the original idea.
+- Published `presidio` as a PyPI meta-package that installs `presidio-analyzer` and `presidio-anonymizer`, making `pip install presidio` work as expected. Inspired by and thanks to Sakthi Santhosh Anumand and Harsha Vardhan for the original idea. (#1889) (Thanks @Copilot)
+
+#### Changed
+- Pinned all CI/CD GitHub Actions and Docker base images to commit SHAs to mitigate supply chain attacks (#1861) (Thanks @Copilot)
+- Pinned `ruff` and `build` pip installs with SHA256 hashes for OSSF scorecard compliance (#1864) (Thanks @Copilot)
+- Updated GitHub Actions dependencies (`actions/checkout`, `actions/setup-python`, `actions/setup-dotnet`, `actions/cache`, `actions/github-script`, `actions/dependency-review-action`, `azure/login`, `docker/setup-buildx-action`, `github/codeql-action`, `microsoft/security-devops-action`) and base Python Docker images (#1870, #1871, #1872, #1873, #1874, #1875, #1876, #1877, #1878, #1879, #1885, #1886, #1887, #1895, #1896, #1897, #1898) (Thanks @dependabot)
+- Updated README to clarify Presidio's no-authentication-by-design stance with security guidance (#1903) (Thanks @Copilot)
+
+#### Fixed
+- Broken documentation links (#1856) (Thanks @andyjessen)
+
+#### Security
+- Fixed CVE-2024-47874 and CVE-2025-54121 (Starlette vulnerabilities) (#1860) (Thanks @SharonHart)
+- Fixed CVE-2025-2953 and CVE-2025-3730 (#1859) (Thanks @SharonHart)

 ### Analyzer
 #### Added
- Nigerian National Identification Number (NG_NIN) recognizer with Verhoeff checksum validation
- Nigerian Vehicle Registration (NG_VEHICLE_REGISTRATION) recognizer for current format plates (2011+)
- US_NPI recognizer for National Provider Identifier with Luhn checksum validation and context support (#1847) (Thanks @stevenelliottjr)
- UK Postcode (UK_POSTCODE) recognizer with pattern matching and context support
- UK Passport Number (UK_PASSPORT) recognizer for 2-letter + 7-digit format passports issued from 2015 onwards
- UK Vehicle Registration Number (UK_VEHICLE_REGISTRATION) recognizer for current (2001+), prefix (1983-2001), and suffix (1963-1983) plate formats
+- `HuggingFaceNerRecognizer` for direct NER model inference using HuggingFace pipelines without requiring spaCy (#1834) (Thanks @ultramancode)
+- Transformer-based `MedicalNERRecognizer` as a subclass of `HuggingFaceNerRecognizer` for clinical entity detection (#1853) (Thanks @stevenelliottjr)
+- US NPI (National Provider Identifier) recognizer with Luhn checksum validation and context support (#1847) (Thanks @stevenelliottjr)
+- UK Postcode (UK_POSTCODE) recognizer with pattern matching and context support (#1858) (Thanks @tee-jagz)
+- UK Passport (UK_PASSPORT) and Vehicle Registration (UK_VEHICLE_REGISTRATION) recognizers (#1862) (Thanks @tee-jagz)
+- Nigerian National Identification Number (NG_NIN) recognizer with Verhoeff checksum validation and Nigerian Vehicle Registration (NG_VEHICLE_REGISTRATION) recognizer (#1863) (Thanks @tee-jagz)
+- ONNX Runtime backend support for `GLiNERRecognizer` via `load_onnx_model=True` parameter, resolving crashes on CPUs without AVX2 support (#1884) (Thanks @Copilot)
+- Configurable regex execution timeout (default 60 seconds) via `REGEX_TIMEOUT_SECONDS` environment variable to prevent catastrophic backtracking (#1904) (Thanks @Copilot)
+- GPU device control via environment variable for explicit GPU/CPU selection (#1844) (Thanks @RonShakutai)
+- LLM-as-a-judge evaluation integration for assessing PII detection quality (#1900) (Thanks @RonShakutai)
+- Sampling support for the evaluation framework (#1894) (Thanks @RonShakutai)
+- Dataset interface for the evaluation framework (#1893) (Thanks @RonShakutai)

-### Analyzer
-#### Changed
- Refactored MedicalNERRecognizer to subclass HuggingFaceNerRecognizer, using HuggingFace pipeline directly without spaCy (#1853) (Thanks @stevenelliottjr)
+#### Fixed
+- Erroneous anchor in Italian driver license regex that caused missed matches (#1899) (Thanks @Br1an67)
+- `validation_result` type annotation in API docs and type hints (#1869) (Thanks @akios-ai)
+- Bare `except` clauses replaced with `except Exception` for proper exception handling (#1881) (Thanks @haosenwang1018)
+- Context enhancement substring matching bug where context words were incorrectly matched as substrings (#1827) (Thanks @ravi-jindal)
+
+### Image Redactor
+#### Fixed
+- `_process_names` unconditionally treating all DICOM metadata as PHI; now correctly filters using both `is_patient` and `is_name` checks (#1855) (Thanks @Mr-Neutr0n)

 ## [2.2.361] - 2026-02-12
 ### Analyzer
@@ -710,7 +737,8 @@ Upgrade Analyzer spacy version to 3.0.5
 New endpoint for deanonymizing encrypted entities by the anonymizer.  


-[unreleased]: https://github.com/microsoft/presidio/compare/2.2.361...HEAD
+[unreleased]: https://github.com/microsoft/presidio/compare/2.2.362...HEAD
+[2.2.362]: https://github.com/microsoft/presidio/compare/2.2.361...2.2.362
 [2.2.361]: https://github.com/microsoft/presidio/compare/2.2.360...2.2.361
 [2.2.360]: https://github.com/microsoft/presidio/compare/2.2.359...2.2.360
 [2.2.359]: https://github.com/microsoft/presidio/compare/2.2.358...2.2.359
--- a/presidio-analyzer/pyproject.toml
+++ b/presidio-analyzer/pyproject.toml
@@ -4,7 +4,7 @@ requires = ["poetry-core"]

 [project]
 name = "presidio_analyzer"
-version = "2.2.361"
+version = "2.2.362"
 description = "Presidio Analyzer package"
 authors = [{name = "Presidio", email = "presidio@microsoft.com"}]
 license = "MIT"
--- a/presidio-anonymizer/pyproject.toml
+++ b/presidio-anonymizer/pyproject.toml
@@ -4,7 +4,7 @@ requires = ["poetry-core"]

 [project]
 name = "presidio_anonymizer"
-version = "2.2.361"
+version = "2.2.362"
 description = "Presidio Anonymizer package - replaces analyzed text with desired values."
 authors = [{name = "Presidio", email = "presidio@microsoft.com"}]
 license = "MIT"
--- a/presidio-image-redactor/pyproject.toml
+++ b/presidio-image-redactor/pyproject.toml
@@ -4,7 +4,7 @@ requires = ["poetry-core"]

 [project]
 name = "presidio-image-redactor"
-version = "0.0.57"
+version = "0.0.58"
 description = "Presidio image redactor package"
 authors = [{name = "Presidio", email = "presidio@microsoft.com"}]
 license = "MIT"
--- a/presidio/pyproject.toml
+++ b/presidio/pyproject.toml
@@ -4,7 +4,7 @@ requires = ["poetry-core"]

 [project]
 name = "presidio"
-version = "2.2.361"
+version = "2.2.362"
 description = "Presidio - Data Protection and De-identification SDK"
 authors = [{name = "Presidio", email = "presidio@microsoft.com"}]
 license = "MIT"