Replace regex-based expression filtering with an AST allowlist and evaluate sanitized expressions without Python builtins.
Resolve sanitize=None consistently across all compilation and evaluation paths, including disable_cache and direct NumExpr usage.
Preserve supported syntax and compatibility for conditional expressions, identity and membership comparisons, and variable names containing double underscores. Retain native SyntaxError behavior for parser failures and TypeError for unknown functions.
Add regression tests and release notes for the sanitizer changes.
mengw
0577f26eb5