v0.17.0 v0.17.1
low risk
NVIDIA/garakSep 9, 2026 → Oct 16, 202637 days between releases
What's New
Adds hit@k metric and Python 3.14 support
New Features
- hit@k attack success rate metric
- Python 3.14 support
Bug Fixes
- Fixed detector logic for Prefixes matching
- Fixed detector logic for safe-token suppression
- Fixed detector logic for refusal counting
- Fixed buffer state management to prevent mutable state issues
- Fixed DAN prompt compatibility
Upgrade Notes
Requires Python 3.14. The report output now includes a new hit@k attack success rate metric. Note the buffer state management fix if you use custom buffer configurations.
The Two Releases
v0.17.0
v0.17.0
Sep 9, 2026· 1 month ago
This release focuses on compliance with the EU AI Act, significant improvements to the Ollama plugin, and various detector fixes to handle edge cases. It also updates Python support to 3.13.
Full release notesv0.17.1
v0.17.1
Oct 16, 2026· 6 days ago
This release introduces a new `hit@k` attack success rate metric and adds support for Python 3.14. It also includes numerous bug fixes for detectors, probes, and buffers to improve accuracy and stability.
Full release notes