v0.16.0

HelixDB/helix-dbv0.16.0Sep 16, 2025by ppfeister

AI Summary

Sherlock v0.16.0 reduces false positives through automatic testing, introduces community packages for Debian and Ubuntu, and enforces Python 3.10+.

Key Highlights

  • Significant reduction in false positives via automatic testing on upstream sites.
  • Community packages now available for Debian and Ubuntu.
  • Automatic filtering of false-positive prone sites.
  • PEP 561 compliance with support for mypy static type checking.

Breaking Changes

  • Deprecated support for now-EOL Python 3.8 and 3.9 (now requires Python 3.10+).

New Features

  • Automatic filtering of false-positive prone sites.
  • Overloaded `--json` flag to accept pull request numbers as manifest URIs.
  • Added `--no-txt` flag to disable automatic txt file output.
  • PEP 561 compliance for mypy static type checking.

Full Release Notes

## What's Changed

Most users should see a significant reduction in false positives (on an ongoing basis) after updating to this release. Nothing is ever perfect (regional differences, etc), but noise should be reduced by a notable margin.

- 📦 Community package now available on [__Debian__][ext-debian] @Nilsonfsilva
- 📦 Community package now available on [__Ubuntu__][ext-ubuntu] @Nilsonfsilva
- ✨ **Automatic filtering of most false-positive prone sites by way of [automatic testing](https://github.com/sherlock-project/sherlock/blob/master/tests/test_validate_targets.py) on [upstream](https://github.com/sherlock-project/sherlock/blob/exclusions/false_positive_exclusions.txt)** @ppfeister 
- ✨ \-\-json flag overloaded to allow use of pull request numbers as manifest URIs (#2356) @bytexenon 
- ✨ \-\-no-txt flag added to disable automatic txt file output __(functionality may change later)__ (#2263) @ntexe 
- ✨ Basic PEP 561 compliance with support for mypy static type checking (#2277) @ppfeister 
- ‼️ Deprecated support for now-EOL Python 3.8 and 3.9 (now ^3.10) @ppfeister

Additional manifest contributors this cycle: @Netail @MR-VL @L0mbart @paperbenni @gtkacz @Suramyavns @nktkhndlwl @Nuung @alokranjan609 @yuzicodes @rskbansal @NOMADE55 @ReganBell @sk337 @Pasanlaksitha @SOGeKING-NUL @ibnaleem @brantonb @joeyagreco @jasontenpenny @S1lvus  @MaxwellOldshein  @Davis-3450 @akamayu-ouo @craiglondon @pylapp @tulsishetty07 @kotarofu @telemaxxx @rsb-23

Additional codebase contributors this cycle: @Txbias (docs) @PeterDaveHello (dockerfile) @anujatappeta (fixed dead tests)

[__[full changelog]__][changelog]

[ext-debian]: https://packages.debian.org/trixie/sherlock
[ext-ubuntu]: https://packages.ubuntu.com/source/oracular/sherlock

[changelog]: https://github.com/sherlock-project/sherlock/compare/v0.15.0...v0.16.0

<details>
<summary>Click to expand package version grid</summary>

___

Note that community-supported packages are by definition not officially supported. They are provided for convenience and portability. See the documentation for info as to which packages currently have official support. Community based package, or those found on Linux distribution repositories, may take longer to update - to avoid breaking changes, using official packages on the latest version is recommended.   

[![Packaging status](https://repology.org/badge/vertical-allrepos/sherlock-social-osint.svg)](https://repology.org/project/sherlock-social-osint/versions)

</details>