What's Changed

• Preserve whitespace when using --anonymize-passwords/--sensitive-words by @dhalperi (thanks, @cdtomkins!) #225
• Add Python 3.14 support by @dhalperi in #227

Full Changelog: v0.14.0...v0.15.0

What's Changed

• Refactor password anonymization to match multiple passwords. by @ankenyr in #207

Full Changelog: v0.13.0...v0.14.0

Release notes

Notable features and improvements added in this release:

• Added anonymization for AWS pre-shared keys (#196 – thanks, @ankenyr!)
• Added multi-vendor support for anonymizing clear-test or reversible key consistently such Junos Type 9 (#195 – thanks, @ankenyr!)
• Anonymization of in-memory configs to prevent every writing them on disk (#186 – thanks, @Kircheneer!)
• Improved secret recognition for for vendors including Arista, Cisco IOS, Cisco NX-OS (#168), and FortiOS

Release Notes

Notable features and improvements added in this release:

• Only require ipaddress for Python versions where it's not in the standard library (#171)
• Updated reserved token list to match Batfish (#170)

Release Notes

Notable features and improvements added in this release:

• Fixed IP-map dumping (-d) (#165), thanks @Yoo33!
• Fixed de-anonymization (-u) (#160)
• More Fortinet sensitive line support (#158), thanks @ryanmerolle!
• More Arista and NXOS sensitive line support (#162)
• IP addresses are anonymized in more contexts, e.g. object_name_10.10.10.10 (#159)
• Updated reserved token list to match Batfish (#163, #166)

Notable features and improvements added in this release:

• Add password recognition for Fortinet password ENC <hash> (#152). Thanks, @ryanmerolle!

Release Notes

Notable features and improvements added in this release:

• Host bits can now be preserved with the --preserve-host-bits option (#150)
  • This enables important network structure to be preserved like point-to-point IPv4 /30 links or NAT pools
  • This option is enabled by default and preserves the last 8 bits
  • Note: this changes netconan default behavior (previously the last octet was anonymized by default), this new behavior can be disabled by setting preserve host bits to 0: --preserve-host-bits 0
• Reserved tokens list was updated to match current tokens used by Batfish (#149)
• Sensitive words are now anonymized in a case-sensitive way (#148)
  • All cases still match and are considered sensitive, but different cases like Sensitive versus sensitive will be anonymized uniquely
• netconan's version can be checked with the --version flag (#146)

Release Notes

Notable features and improvements added in this release:

• IP addresses are anonymized in more contexts, including PAN hierarchical format e.g. address 10.10.10.10; (#144)

Release Notes

Notable features and improvements added in this release:

• Reserved words are no longer anonymized when they contain sensitive words (#139)

Release Notes

Notable features and improvements added in this release:

• Removed dependency on regex package (#132, #133)