Version 3.3.4

New Features and Improvements

• Expectation Over Transformation Wrapper
• Add MIFGSM Attack

Version 3.3.3

New Features and Improvements

• Fixed a bug that AdamPGD attacks actually didn't use the Adam optimizer
• Attacks now verify that the input to them lies within the bounds of the model

Version 3.3.2

New Features and Improvements

• Added AdamPGD attack
• Added pointwise attack
• Hop-skip-jump attack bug fix (thanks @zhuangzi926)
• other improvements and bug fixes

Version 3.3.1

Serious bug fix for SaltAndPepperAttack (thanks @maurapintor @zangobot)

Version 3.3.0

New Features and Improvements

• PGD now supports targeted attacks (thanks @zimmerrol)
• DDN attack bug fixes (thanks @maurapintor)
• Brendel Bethge attack bug fixes (thanks @wielandbrendel)
• other improvements and bug fixes

Version 3.2.1

Foolbox release for Zenodo

Version 3.2.0

• added our JOSS paper
• added a performance comparison between Foolbox 1, 2, and 3
• improved tests
• fixed the TensorFlow example code
• improved examples
• improved tutorial
• updated dependencies

Version 3.1.1

Bug fix

Version 3.1.0

New Features

• ported HopSkipJump attack to v3
• added clipping-aware noise attacks
• model wrappers now support data_format
• JAXModel now supports data_format
• improved documentation

Bug Fixes

• EADAttack bug fixes
• GenAttack bug fixes
• Other bug fixes and improvements

Version 3.0.4

Fixed the version number