github promptfoo/promptfoo 0.122.0

6 hours ago

0.122.0 (2026-08-04)

⚠ BREAKING CHANGES

  • drop Node.js 20 support (#10260)

Bug Fixes

  • deps: keep the Shai-Hulud compromised versions unreachable (#10301) (db2a066)
  • deps: patch undici in code-scan-action and guard both lockfiles (#10278) (15bf41f)
  • deps: pin socket.io-parser above the packet-decoder DoS (#10279) (d0f2a83)
  • deps: repair Biome and undici upgrade regressions (#10292) (3565a3c)
  • deps: restore XML entity decoding for xlsx test files (#10249) (00cdeb9)
  • deps: update anthropic packages (#10234) (6279230)
  • deps: update anthropic packages (#10277) (f8609a6)
  • deps: update dependency execa to v10 (#10227) (bab74b8)
  • deps: update opentelemetry (#10290) (5638797)
  • providers: correct Nscale model identifiers (#10259) (249b125)
  • providers: stop leaking Nscale provider settings into the request body (#10258) (d23f86a)
  • providers: stop WebSocket evals from hanging when a stream stalls (#10266) (60898c7)

Miscellaneous Chores

Don't miss a new promptfoo release

NewReleases is sending notifications on new releases.