Add guards against loading pkl files

[isaacbmiller]

Adds a guard against loading pkl files in individual programs without an argument or environment variable set.

[isaacbmiller]

@codex review

[chatgpt-codex-connector]

Codex Review: Didn't find any major issues. Bravo.

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

[Copilot]

Pull Request Overview

This PR adds security guards to prevent unsafe loading of pickle files in DSPy programs. Pickle files can execute arbitrary code when loaded, so this change requires explicit permission via either the dangerously_allow_pickle=True parameter or the DSPY_ALLOW_PICKLE=1 environment variable before loading .pkl files or programs saved with save_program=True.

• Added dangerously_allow_pickle parameter to dspy.load() and BaseModule.load() methods
• Updated all existing tests to use dangerously_allow_pickle=True when loading pickle files
• Added comprehensive test coverage for the new security guards
• Updated documentation with security warnings about pickle file risks

Reviewed Changes

Copilot reviewed 7 out of 7 changed files in this pull request and generated 2 comments.

Show a summary per file

File	Description
dspy/utils/saving.py	Added dangerously_allow_pickle parameter and permission check to the load() function
dspy/primitives/base_module.py	Added dangerously_allow_pickle parameter and permission check to the load() method; added warning in save method
tests/utils/test_saving.py	Updated existing tests to use dangerously_allow_pickle=True; added new tests for permission requirements and environment variable behavior
tests/primitives/test_base_module.py	Updated existing tests to use dangerously_allow_pickle=True; updated test expectations to account for pickle loading warning
tests/predict/test_predict.py	Updated test to use dangerously_allow_pickle=True when loading
docs/docs/tutorials/saving/index.md	Added security warnings about pickle file risks and updated code examples
docs/docs/tutorials/games/index.ipynb	Added security warning and updated code example with dangerously_allow_pickle=True

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[chenmoneygithub]

Thanks for the PR!

[isaacbmiller]

Removed environment variable, changed from dangerously_allow_pickle to just allow_pickle, and suggested module.save("module.json").

[chenmoneygithub]

LGTM!