$ the-wire · showcase
PyRIT dedupes converter identifiers, masks combining-mark prompts
By RepoJournal · Filed · About AI Red Teaming · Composed from the cited sources · methodology
PyRIT shipped the operator-facing fixes this window: converter registration no longer collides on differing configs, and pointed-script prompts are masked instead of silently skipped, while promptfoo held Keyv on v5.
FIX Include module colors, layout and injection items in QRCodeConverter and PDFConverter identifiers microsoft/PyRIT
Settings that change the generated file but were missing from _build_identifier() meant different configs shared a hash and a default registry name, so registering QRCodeConverter() and then QRCodeConverter(finder_dark_color=(255, 0, 0)) raised ValueError: Instance 'QRCodeConverter::44666788' already exists. PDF converters differing only in row_height, column_width or injection_items collided t...
FIX: mask words written with combining marks instead of skipping them microsoft/PyRIT
The tokenizer now treats combining marks as part of the word, so prompts in pointed scripts get masked rather than quietly skipped. If your red-team runs leaned on those scripts, expect previously clean outputs to start showing masks.
FIX: Support user:password credentials and IPv4 destinations in OpenRedirectOutputScorer (#3259) microsoft/PyRIT
OpenRedirectOutputScorer's "Userinfo Host Confusion" pattern matched only a restricted character set after the @, so payloads carrying user:password credentials or IPv4 destinations slipped past it. The scorer now flags those forms, which means previously passing responses may start scoring as open-redirect hits.
FEAT: Share image, audio, and video previews with dataset details microsoft/PyRIT
Dataset example details now preview image, audio and video members through the same MediaPreview component chat uses, and nothing is fetched until you click "Show ... preview". While a preview is open the image loads with loading="lazy" and audio/video with preload="none", with no autoplay.
test(cache): cover real Keyv storage compatibility promptfoo/promptfoo
The Keyv 6 upgrade was deferred: it breaks cache-manager 7's Keyv 5 contract, failing the build and making existing keyv: disk entries invisible, and the upstream migration guide requires instances passed to cache-manager stay on v5. The compatible cache-manager release is 7.2.9.
Action items
