1.16.2 (2026-03-24)
Bugs Fixed
- Fixed adversarial chat target incorrectly using user's callback instead of RAI service, causing callback response to appear as user message in red team scan results when using converter strategies (e.g.,
DIFFICULT,Tense). - Fixed
hate_unfairnessattack success rate always reporting 0% due to metric name mapping using legacyhate_fairnessname instead of canonicalhate_unfairness. - Fixed
TypeErrorin multi-turn and crescendo attacks caused by PyRIT 0.11+ renamingsend_prompt_asyncparameter fromprompt_requesttomessage. - Expanded endpoint normalization (
/openai/v1suffix) to all Azure OpenAI host suffixes (including sovereign clouds), fixing 404 errors for classic AOAI endpoints with PyRIT 0.11+. - Added
aml-aca-tokencredential fallback for agent-type seed requests when running locally without ACA managed identity. - Extract RAI scorer token metrics (prompt_tokens, completion_tokens, total_tokens) into Score metadata and propagate through result processing for downstream aggregation.