Release v1.26.0 (#423)

Author: Anilm3

.github/workflows/build.yml

@@ -369,9 +369,12 @@ jobs:
               baseline_size=$(du -b ./baseline/$file | awk '{print $1}')
               candidate_size=$(du -b ./candidate/$file | awk '{print $1}')
 
-              diff=$(( (candidate_size-baseline_size)/(baseline_size+1) ))
-
-              echo "| $( echo $file | sed 's@\([^/]*\)/\([^/]*/\)*\(.*\)@\1::\3@g')| $baseline_size | $candidate_size | $diff% |" >> comparison.md
+              if [[ $baseline_size -gt 0 ]]; then
+                diff=$(echo "scale=2; ($candidate_size-$baseline_size)/($baseline_size + 1)" | bc -l | awk '{printf "%.2f\n", $0}')
+                echo "| $( echo $file | sed 's@\([^/]*\)/\([^/]*/\)*\(.*\)@\1::\3@g')| $baseline_size | $candidate_size | $diff% |" >> comparison.md
+              else
+                echo "| $( echo $file | sed 's@\([^/]*\)/\([^/]*/\)*\(.*\)@\1::\3@g')| $baseline_size | $candidate_size | ∞ |" >> comparison.md
+              fi
           done
 
       - name: Post PR comment

CHANGELOG.md

@@ -1,9 +1,23 @@
 # libddwaf release
 
-## v1.25.2 ([unstable](https://github.com/DataDog/libddwaf/blob/master/README.md#versioning-semantics))
+## v1.26.0 ([unstable](https://github.com/DataDog/libddwaf/blob/master/README.md#versioning-semantics))
+
+### New features
+
+This release introduces a new operator, `hidden_ascii_match`, designed to detect hidden ASCII characters within arbitrary text inputs. Hidden ASCII refers specifically to characters found within the Unicode range [U+E0000, U+E007F]. This Unicode block was initially defined to provide non-printable mappings of standard ASCII characters, effectively allowing ASCII data to be embedded invisibly within text.
+
+Hidden ASCII characters have been increasingly leveraged to inject concealed instructions into prompts provided to LLMs, manipulating their behavior without explicit visibility to users or systems. The introduction of the `hidden_ascii_match` operator represents the first step toward a deterministic AI security strategy, proactively identifying and flagging these character sequences to support the effective monitoring and mitigation of potential Unicode-based prompt injection exploits.
+
+#### Changes
+- Hidden ASCII Matcher ([#411](https://github.com/DataDog/libddwaf/pull/411))
+
 #### Fixes
 - Add missing `ddwaf_builder_get_config_paths` export to windows shared libraries ([#421](https://github.com/DataDog/libddwaf/pull/421))
 
+#### Miscellaneous
+- Replace `re2::StringPiece` with `std::string_view` ([#412](https://github.com/DataDog/libddwaf/pull/412))
+- Add artifact comparison to PR ([#422](https://github.com/DataDog/libddwaf/pull/422))
+
 ## v1.25.1 ([unstable](https://github.com/DataDog/libddwaf/blob/master/README.md#versioning-semantics))
 #### Fixes
 - Support backwards-incompatible rules through the `rules_compat` key ([#409](https://github.com/DataDog/libddwaf/pull/409))

version

@@ -1 +1 @@
-1.25.1
+1.26.0