export_joyvasa_audio.py was using safetensors.torch.load_file() on a
native PyTorch checkpoint, which fails with SafetensorError. Replace with
torch.load(..., weights_only=True) and an explicit add_safe_globals
allowlist ([argparse.Namespace, PosixPath]), consistent with the other
two JoyVASA export scripts.
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Replaces weights_only=False with weights_only=True and an explicit
add_safe_globals allowlist ([argparse.Namespace, PosixPath]) in both
JoyVASA export scripts. This is the sanctioned PyTorch mitigation for
the trailofbits pickles-in-pytorch semgrep pattern: only the known-safe
non-default classes are allowlisted; all others are rejected by the
restricted unpickler. Checkpoint format, SHA-256 pins, and all
downstream payload accesses are unchanged.
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
