Changelog

All notable changes to NAT are documented here. For the full technical changelog, see the CHANGELOG.md (opens in a new tab) in the framework repository.

v1.1.6 — 2026-04-13

Fixed

• Release pipeline (setuptools-scm): Build job now explicitly sets SETUPTOOLS_SCM_PRETEND_VERSION from the git tag, preventing wheels from being published with an incorrect fallback version. Added a post-build verification step that fails the job if the wheel filename doesn't match the expected version.
• PyPI version 1 yanked: A broken release published as version 1 (instead of 1.1.5) was yanked from PyPI due to the setuptools-scm fallback bug above.

Changed

• GitHub Action release workflow — multiple iterations of CI fixes for test stability, action validation, and release automation (v1.1.1 through v1.1.5).

v1.1.0 — 2026-04-12

Phase 8 — Ecosystem, Scale & Adoption

• Enterprise Integration Ecosystem: Sentry and Bugzilla exporter plugins, nat export list CLI command, bringing total built-in exporters to 11
• Worker Pools & Horizontal Scale: Distributed test execution via queue-based worker pools, nat worker launch and nat worker status CLI commands
• Docs, CLI & DX Polish: nat setup interactive onboarding wizard, nat doctor environment diagnostics, nat upgrade and nat uninstall lifecycle commands, .env.example with all environment variables
• Live Staging & E2E Validation: Staging environment infrastructure, canary deployment support, smoke test suite
• Go-to-Market Readiness: Sales enablement content, landing page assets, demo environment

Phase 9 — Live Demo, gRPC Docs, Housekeeping & Scheduled Scans

• OrangeHRM Live Demo: Autonomous functional E2E test demo with recording scripts
• gRPC Documentation & E2E: gRPC scanning guide replacing "Coming Soon" placeholders, gRPC E2E tests
• Housekeeping: README feature matrix update, CI badge corrections, backlog cleanup
• Scheduled Scans E2E: Dashboard UI, REST API, and cron engine wiring

Fixed

• VulnAPI fixture port collisions causing test errors — testbed now uses dynamic port allocation
• Docker publish setuptools-scm build dependency and PEP 440 version sanitization
• Smoke tests gracefully skip when staging environment is unreachable

Changed

• [dev] extras now include stripe>=8.0, Pillow>=11.0, and pytest-playwright>=0.4.0
• Version management fully driven by setuptools-scm from git tags

v1.0.5 — 2026-04-07

Patch release with CI/CD pipeline fixes and stability improvements.

v1.0.0 — 2026-03-27

Initial public release.

Core features

• REST API security scanning against OWASP API Top 10
• OpenAPI 3.x and Swagger 2.x specification support
• Specless crawl mode for APIs without a specification
• Bearer token, API key header, and OAuth2 client credentials authentication
• HTML and JSON report formats
• CI/CD integration via CLI (pip install nat-engine)
• Docker image (natengine/nat)
• GitHub Actions workflow example
• Multi-agent BDI architecture with neural network oracles
• Adaptive test allocation with belief-guided prioritization
• GraphQL security checks (5 dedicated checks)
• LLM-powered test generation (OpenAI and Anthropic)
• Self-healing test suites with schema diffing
• Regression recording and replay
• Web dashboard with 5 tabs
• Docker, Compose, and Kubernetes deployment support
• GitHub Action (marketplace-ready), Jenkins, GitLab CI, and Azure Pipelines templates

Upcoming

Features in active development:

• Scheduled scans — run scans on a cron schedule from the dashboard
• Slack / Teams notifications — native integration with team communication tools

Have a feature request? Contact us.