release: SkillSpector 2.9.5

[keshprad]

SkillSpector 2.9.5

Publishes the sanitized public OSS snapshot for SkillSpector 2.9.5.

Source

• Internal release source: main / release/2.9.5 at 68d00548312ebd3873bc75f6b97ce4fdde32a1bb.
• Internal sanitized branch: release/oss-2026-08-14.
• Sanitized orphan commit: 7fb612286a8bd7558f40b6c782dbb8b48c49020f.
• Public snapshot commit: 6b836e925c294ed87777e0feaaed886d1e85e6c0.
• Release notes: docs/release/skillspector-2.9.5.md.

Included

• Adds Ollama, Azure OpenAI, and generic OpenAI-compatible provider support.
• Adds opt-in author-shipped baselines and insecure-deserialization detection.
• Improves safety-pattern false positives, MCP dependency compatibility, and YARA namespace and byte-offset handling.
• Updates version metadata, the lockfile, changelog, and public release notes.
• Pins wheel and sdist Core Metadata to 2.4 for compatibility with the supported publishing toolchain.

Public boundary

• No public-only files, GitHub workflows, templates, or policy files were removed or changed.
• Removed one scrubber-only trailing blank line so the public Makefile remains unchanged.

Validation

• Internal release pipeline 62803328: lint, unit, integration, Docker smoke, and Sonar passed.
• Sanitized snapshot make test-unit: 2,190 passed, 13 skipped, 38 deselected, and 4 expected failures.
• Final public git diff --cached --check: passed.
• Final public GitNexus scope: low risk, four files, zero affected execution flows.
• Internal 2.9.5 sdist and wheel were published and their SHA-256 digests verified through Artifactory.