Starstruk Logo MarkStarstruk

v0.13.3

cyphar/paperbackv0.13.3Dec 12, 2025by jmartin-tech

AI Summary

A maintenance release focusing on new security probes and generators, specifically adding AWS Bedrock support and an API key detector, along with extensive documentation improvements.

Key Highlights

  • New AWS Bedrock generator
  • New API key probe and detector
  • New zero-width bad character injection probe
  • Improved consistency for PRNG access in generators

Breaking Changes

  • Removal of support for `init'ing attempt.prompt` with `str`
  • Removal of support for `attempt.lang` value

New Features

  • AWS Bedrock generator
  • API key probe + detector
  • Zero-width bad char injection
  • Consistent PRNG access in generators

Full Release Notes

## What's Changed

### New plugins
* probe: Api key probe + detector by @martinebl in https://github.com/NVIDIA/garak/pull/1406
* probe: zero width bad char injection by @Har1sh-k in https://github.com/NVIDIA/garak/pull/1489
* generator: AWS bedrock generator by @fabriziorocco in https://github.com/NVIDIA/garak/pull/1462

### New features
* enable consistent PRNG access in generators by @jmartin-tech in https://github.com/NVIDIA/garak/pull/1496

### Improved plugins
* probe: Add more unreal pkghallu targets by @leondz in https://github.com/NVIDIA/garak/pull/1480
* feature: `OpenAICompatible` classes do one generation at a time by default by @leondz in https://github.com/NVIDIA/garak/pull/1524

### Documentation
* docs: add test for file extensions in docs dir by @leondz in https://github.com/NVIDIA/garak/pull/1474
* docs: describe probe module doc standard; implement it in all probe modules by @leondz in https://github.com/NVIDIA/garak/pull/1473
* docs(fix): Format list in RST by @mikemckiernan in https://github.com/NVIDIA/garak/pull/1491
* docs: add projects file for tracking garak ecosystem by @leondz in https://github.com/NVIDIA/garak/pull/1493
* doc: rm links to doc source; show links to github code source by @leondz in https://github.com/NVIDIA/garak/pull/1506
* docs: check for markdown in plugin docs, check for plugin module docstrings by @leondz in https://github.com/NVIDIA/garak/pull/1505
* docs: refine markdown checks by @leondz in https://github.com/NVIDIA/garak/pull/1510

### Tuning & fixes
* tests: detector cardinality test tweaks by @leondz in https://github.com/NVIDIA/garak/pull/1476
* tool: add script for rebuilding plugin cache by @leondz in https://github.com/NVIDIA/garak/pull/1478
* allow for `apikey` case where `group=None` by @boltzmann-brain in https://github.com/NVIDIA/garak/pull/1497
* fix: metadata and vuln_id handling in AVID report export by @saichandrapandraju in https://github.com/NVIDIA/garak/pull/1495
* test: add tests for `apikey` detector `None`-group handling by @leondz in https://github.com/NVIDIA/garak/pull/1501
* bugfix: `TreeSearchProbe` should handle `None`s  by @leondz in https://github.com/NVIDIA/garak/pull/1509
* housekeeping: add code of conduct by @leondz in https://github.com/NVIDIA/garak/pull/1517
* arch: rm support for init'ing `attempt.prompt` with `str`, rm support for `attempt.lang` value by @leondz in https://github.com/NVIDIA/garak/pull/1361
* fix: encoding probes storing translated text in `pre_translation_prompt` by @paulinek13 in https://github.com/NVIDIA/garak/pull/1483
* feature: deferred loading and requirement pruning by @leondz in https://github.com/NVIDIA/garak/pull/1199

## New Contributors
* @boltzmann-brain made their first contribution in https://github.com/NVIDIA/garak/pull/1497
* @fabriziorocco made their first contribution in https://github.com/NVIDIA/garak/pull/1462
* @saichandrapandraju made their first contribution in https://github.com/NVIDIA/garak/pull/1495
* @Har1sh-k made their first contribution in https://github.com/NVIDIA/garak/pull/1489

**Full Changelog**: https://github.com/NVIDIA/garak/compare/v0.13.2...v0.13.3