Skip to content

Releases: pixee/codemodder-java

v0.97.1

08 Nov 18:44
882f436

Choose a tag to compare

Adds new transformation for SQL injection/parameterization codemods (…

v0.97.0

15 Oct 13:19
364702d

Choose a tag to compare

Refactors SQL Remediator and Codemods & HQL Transformation Bugfix (#456)

Refactors SQL injection codemods to use the new remediator API and fixes
a HQL transformation bug.

v0.96.0

02 Oct 13:17
6fc81f2

Choose a tag to compare

New Sonar SSRF codemod (#449)

/close #work

Could not find any examples of sonar findings for SSRF vulnerabilities
using `Url` or `HTTPUrlConnection`. This codemod only covers
vulnerabilities found using the `RestTemplate` class from spring.

v0.95.0

19 Sep 00:07
9196cb2

Choose a tag to compare

:sparkles: Open Source Semgrep codemods (#448)

- **:truck: open source semgrep codemods**
- **:sparkles: add semgrep codemods**

v0.94.1

18 Sep 19:51
50cf515

Choose a tag to compare

Added check for existing overrides in add-missing-override (#447)

If you have multiple findings of the same rule for the same location,
some codemods will duplicate their fixes.

This PR adds a patch to stop this for the `add-missing-override`
codemod.

v0.94.0

23 Aug 17:14
22caa90

Choose a tag to compare

✨ Support CodeTF Findings Without IDs (#443)

When a finding has no ID, we prefer to reflect this in CodeTF vs make up
a new ID that is not significant to the tool that produced the finding.

/towards ISS-1837

v0.93.1

22 Aug 00:55
eb9084a

Choose a tag to compare

⬆️ Use Correct Encoding Type for GPT-4o (#441)

Upgraded jtokkit to a newer version that supports the encoding type we
need.

v0.93.0

15 Aug 13:21
f067232

Choose a tag to compare

Added remediators and improved method searching flexibility (#437)

v0.92.3

01 Aug 15:18
42f1f73

Choose a tag to compare

More graceful failure when expected files are missing in Semgrep (#436)

Although some use cases are very strict about SARIF-referenced files
being present, others aren't (like testing) -- we should handle this
more gracefully.

v0.92.2

27 Jul 20:22
35ba4a8

Choose a tag to compare

Added XXE remediation at intermediate events (#433)

Also added tests, a. common reporter, etc.