Skip to content

Release 3.0.2 - #3332

Draft
liquidsec wants to merge 38 commits into
stablefrom
dev
Draft

Release 3.0.2#3332
liquidsec wants to merge 38 commits into
stablefrom
dev

Conversation

@liquidsec

Copy link
Copy Markdown
Collaborator

No description provided.

@liquidsec
liquidsec marked this pull request as draft July 21, 2026 21:16
@github-actions

github-actions Bot commented Jul 21, 2026

Copy link
Copy Markdown
Contributor

📊 Performance Benchmark Report

Comparing stable (baseline) vs dev (current)

📈 Detailed Results (All Benchmarks)

📋 Complete results for all benchmarks - includes both significant and insignificant changes

🧪 Test Name 📏 Base 📏 Current 📈 Change 🎯 Status
Bloom Filter Dns Mutation Tracking Performance 4.27ms 4.24ms -0.6%
Bloom Filter Large Scale Dns Brute Force 17.37ms 17.81ms +2.5%
Large Closest Match Lookup 340.56ms 333.05ms -2.2%
Realistic Closest Match Workload 177.20ms 179.96ms +1.6%
Event Memory Medium Scan 1402 B/event 1403 B/event +0.1%
Event Memory Large Scan 1527 B/event 1527 B/event +0.0%
Event Validation Full Scan Startup Small Batch 400.94ms 400.06ms -0.2%
Event Validation Full Scan Startup Large Batch 515.27ms 512.82ms -0.5%
Make Event Autodetection Small 20.36ms 20.25ms -0.5%
Make Event Autodetection Large 206.38ms 207.02ms +0.3%
Make Event Explicit Types 8.46ms 8.40ms -0.8%
Excavate Single Thread Small 3.787s 3.757s -0.8%
Excavate Single Thread Large 9.459s 9.414s -0.5%
Excavate Parallel Tasks Small 3.963s 3.889s -1.9%
Excavate Parallel Tasks Large 5.983s 5.963s -0.3%
Intercept Throughput Small 892.29ms 888.78ms -0.4%
Intercept Throughput Medium 876.97ms 869.72ms -0.8%
Dns Throughput Quiet 2.627s 2.641s +0.6%
Dns Throughput Loaded 1.763s 1.737s -1.5%
Dns Throughput Inherited 2.374s 2.282s -3.9%
Is Ip Performance 2.29ms 2.35ms +2.5%
Make Ip Type Performance 207.10µs 211.93µs +2.3%
Mixed Ip Operations 2.35ms 2.46ms +4.7%
Memory Use Web Crawl 1.0 MB 1.0 MB +0.0%
Memory Use Subdomain Enum 28.3 MB 28.4 MB +0.1%
Memory Use Deep Chain 5.0 MB 5.0 MB +0.0%
Memory Use Parallel Chains 12.5 MB 18.1 MB +44.0% 🔴🔴🔴 ⚠️
Scan Throughput 100 2.771s 2.750s -0.8%
Scan Throughput 1000 18.211s 18.864s +3.6%
Typical Queue Shuffle 5.44µs 5.38µs -1.2%
Priority Queue Shuffle 27.11µs 26.65µs -1.7%

🎯 Performance Summary

! 1 regression ⚠️
  30 unchanged ✅

🔍 Significant Changes (>10%)

  • Memory Use Parallel Chains: 44.0% 🐌 more memory

🐍 Python Version 3.11.15

@codecov

codecov Bot commented Jul 21, 2026

Copy link
Copy Markdown

Codecov Report

❌ Patch coverage is 96.55172% with 6 lines in your changes missing coverage. Please review.
✅ Project coverage is 90%. Comparing base (3cf28a4) to head (0c0f95a).
⚠️ Report is 1 commits behind head on stable.

Files with missing lines Patch % Lines
bbot/core/helpers/depsinstaller/installer.py 91% 4 Missing ⚠️
...est_step_2/module_tests/test_module_docker_pull.py 88% 2 Missing ⚠️
Additional details and impacted files
@@           Coverage Diff           @@
##           stable   #3332    +/-   ##
=======================================
+ Coverage      90%     90%    +1%     
=======================================
  Files         450     450            
  Lines       46285   46426   +141     
=======================================
+ Hits        41547   41676   +129     
- Misses       4738    4750    +12     

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

blsaccess and others added 21 commits July 25, 2026 00:42
Bumps [pre-commit](https://github.com/pre-commit/pre-commit) from 4.6.0 to 4.6.1.
- [Release notes](https://github.com/pre-commit/pre-commit/releases)
- [Changelog](https://github.com/pre-commit/pre-commit/blob/main/CHANGELOG.md)
- [Commits](pre-commit/pre-commit@v4.6.0...v4.6.1)

---
updated-dependencies:
- dependency-name: pre-commit
  dependency-version: 4.6.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps the github-actions group with 1 update: [actions/setup-python](https://github.com/actions/setup-python).


Updates `actions/setup-python` from 6 to 7
- [Release notes](https://github.com/actions/setup-python/releases)
- [Commits](actions/setup-python@v6...v7)

---
updated-dependencies:
- dependency-name: actions/setup-python
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [fastapi](https://github.com/fastapi/fastapi) from 0.139.2 to 0.140.0.
- [Release notes](https://github.com/fastapi/fastapi/releases)
- [Commits](fastapi/fastapi@0.139.2...0.140.0)

---
updated-dependencies:
- dependency-name: fastapi
  dependency-version: 0.140.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [pytest-env](https://github.com/pytest-dev/pytest-env) from 1.6.0 to 1.7.0.
- [Release notes](https://github.com/pytest-dev/pytest-env/releases)
- [Commits](pytest-dev/pytest-env@1.6.0...1.7.0)

---
updated-dependencies:
- dependency-name: pytest-env
  dependency-version: 1.7.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [mmh3](https://github.com/hajimes/mmh3) from 5.2.0 to 5.2.1.
- [Release notes](https://github.com/hajimes/mmh3/releases)
- [Changelog](https://github.com/hajimes/mmh3/blob/master/CHANGELOG.md)
- [Commits](hajimes/mmh3@v5.2.0...v5.2.1)

---
updated-dependencies:
- dependency-name: mmh3
  dependency-version: 5.2.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [cachetools](https://github.com/tkem/cachetools) from 7.1.4 to 7.1.6.
- [Changelog](https://github.com/tkem/cachetools/blob/master/CHANGELOG.rst)
- [Commits](tkem/cachetools@v7.1.4...v7.1.6)

---
updated-dependencies:
- dependency-name: cachetools
  dependency-version: 7.1.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [orjson](https://github.com/ijl/orjson) from 3.11.7 to 3.11.9.
- [Release notes](https://github.com/ijl/orjson/releases)
- [Changelog](https://github.com/ijl/orjson/blob/master/CHANGELOG.md)
- [Commits](ijl/orjson@3.11.7...3.11.9)

---
updated-dependencies:
- dependency-name: orjson
  dependency-version: 3.11.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [regex](https://github.com/mrabarnett/mrab-regex) from 2026.7.10 to 2026.7.19.
- [Changelog](https://github.com/mrabarnett/mrab-regex/blob/hg/changelog.txt)
- [Commits](mrabarnett/mrab-regex@2026.7.10...2026.7.19)

---
updated-dependencies:
- dependency-name: regex
  dependency-version: 2026.7.19
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
…regex-2026.7.19

Bump regex from 2026.7.10 to 2026.7.19
…mmh3-5.2.1

Bump mmh3 from 5.2.0 to 5.2.1
…pre-commit-4.6.1

Bump pre-commit from 4.6.0 to 4.6.1
…cachetools-7.1.6

Bump cachetools from 7.1.4 to 7.1.6
…fastapi-0.140.0

Bump fastapi from 0.139.2 to 0.140.0
…pytest-env-1.7.0

Bump pytest-env from 1.6.0 to 1.7.0
…orjson-3.11.9

Bump orjson from 3.11.7 to 3.11.9
Bumps [uvicorn](https://github.com/Kludex/uvicorn) from 0.39.0 to 0.51.0.
- [Release notes](https://github.com/Kludex/uvicorn/releases)
- [Changelog](https://github.com/Kludex/uvicorn/blob/main/docs/release-notes.md)
- [Commits](Kludex/uvicorn@0.39.0...0.51.0)

---
updated-dependencies:
- dependency-name: uvicorn
  dependency-version: 0.51.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
liquidsec and others added 5 commits July 26, 2026 22:24
…actions/dev/github-actions-696b649f44

Bump actions/setup-python from 6 to 7 in the github-actions group
…uvicorn-0.51.0

Bump uvicorn from 0.39.0 to 0.51.0
…esponse

Fix docker_pull crash on failed registry request
Co-authored-by: Paul Mueller <paul.mueller08@gmail.com>
* Reinstall module deps when they're missing from the environment

The setup status cache recorded a module's deps as installed and never
rechecked them, so a rebuilt virtualenv (e.g. `uv sync`) silently left
modules broken until ~/.bbot was wiped by hand. Verify a module's pip
packages are actually present before honoring a cache hit.

Also promote `packaging` to a direct dependency; it was only present
transitively via ansible.

* Remove dead else branch, honor custom pip constraints

The else branch in install()'s dependency loop was unreachable structure;
the preceding branch always continues. Collapsing it also flattens the
nested if/else into elif.

pip_install() overwrote custom constraints with bbot's own instead of
using them as a fallback. No module sets deps_pip_constraints today, so
this changes no current behavior.
@liquidsec liquidsec changed the title Release 3.?.? Release 3.0.2 Jul 31, 2026
dependabot Bot added 6 commits August 4, 2026 21:55
Bumps [packaging](https://github.com/pypa/packaging) from 26.0 to 26.2.
- [Release notes](https://github.com/pypa/packaging/releases)
- [Changelog](https://github.com/pypa/packaging/blob/main/CHANGELOG.rst)
- [Commits](pypa/packaging@26.0...26.2)

---
updated-dependencies:
- dependency-name: packaging
  dependency-version: '26.2'
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [pytest-httpserver](https://github.com/csernazs/pytest-httpserver) from 1.1.4 to 1.1.5.
- [Release notes](https://github.com/csernazs/pytest-httpserver/releases)
- [Changelog](https://github.com/csernazs/pytest-httpserver/blob/master/CHANGES.rst)
- [Commits](csernazs/pytest-httpserver@1.1.4...1.1.5)

---
updated-dependencies:
- dependency-name: pytest-httpserver
  dependency-version: 1.1.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [lxml](https://github.com/lxml/lxml) from 6.1.0 to 6.1.1.
- [Release notes](https://github.com/lxml/lxml/releases)
- [Changelog](https://github.com/lxml/lxml/blob/master/CHANGES.txt)
- [Commits](lxml/lxml@lxml-6.1.0...lxml-6.1.1)

---
updated-dependencies:
- dependency-name: lxml
  dependency-version: 6.1.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [pip](https://github.com/pypa/pip) from 26.1.2 to 26.2.
- [Changelog](https://github.com/pypa/pip/blob/main/NEWS.rst)
- [Commits](pypa/pip@26.1.2...26.2)

---
updated-dependencies:
- dependency-name: pip
  dependency-version: '26.2'
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [uvicorn](https://github.com/Kludex/uvicorn) from 0.51.0 to 0.52.0.
- [Release notes](https://github.com/Kludex/uvicorn/releases)
- [Changelog](https://github.com/Kludex/uvicorn/blob/main/docs/release-notes.md)
- [Commits](Kludex/uvicorn@0.51.0...0.52.0)

---
updated-dependencies:
- dependency-name: uvicorn
  dependency-version: 0.52.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [fastapi](https://github.com/fastapi/fastapi) from 0.140.0 to 0.141.1.
- [Release notes](https://github.com/fastapi/fastapi/releases)
- [Commits](fastapi/fastapi@0.140.0...0.141.1)

---
updated-dependencies:
- dependency-name: fastapi
  dependency-version: 0.141.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants