0.95.0

What's Changed

New

• Adds sonar version of SQLParameterizer codemod by @andrecsilva in #495

Fixed

• fix lazy logging codemod bug with acceptable concatnation by @clavedeluna in #497

Full Changelog: 0.94.0...0.95.0

0.94.0

What's Changed

• Update codetf bindings by @drdavella in #490

Full Changelog: 0.93.0...0.94.0

0.93.0

What's Changed

• add detector name and update test utils by @clavedeluna in #488

Full Changelog: 0.92.1...0.93.0

0.92.1

Short circuit faster when no tool results are available (#483)

0.92.0

What's Changed

• use-walrus-if codemod can handle unused variables by @clavedeluna in #477
• fix-dataclass-defaults can handle populated defaults by @clavedeluna in #479
• Codemod to fix math.isclose comparison to 0 by @clavedeluna in #475
• Enable per-codemod configuration of included files by @drdavella in #480
• add language metadata field by @clavedeluna in #482

Full Changelog: 0.91.0...0.92.0

0.91.0

What's Changed

• Add LLM client to context and optional dependency on OpenAI by @drdavella in #467

Full Changelog: 0.90.0...0.91.0

0.90.0

What's Changed

• Change default behavior for Semgrep and ResultSet by @drdavella in #461
• Remove restriction on ".py" filename suffix by @drdavella in #466

Full Changelog: 0.89.0...0.90.0

0.89.0

What's Changed

New

• sonar url-sandbox by @clavedeluna in #445
• New find-and-fix and sonar codemod for floating point equality by @clavedeluna in #450
• Add detection and processing for external Semgrep SARIF files by @drdavella in #459
• Support simple patterns for codemod include/exclude by @drdavella in #458

Fixed

• Fix typo in docs for bad-lock-with-statement by @drdavella in #449
• walrus if codemod can handle if not operations by @clavedeluna in #452

Full Changelog: 0.88.0...0.89.0

0.88.0

What's Changed

New

• Support sonar hotspots and secure-random sonar hotspot rule by @clavedeluna in #433
• Sonar jinja2 by @clavedeluna in #435
• Implement prototype codemods for DefectDojo remediation by @drdavella in #438

Full Changelog: 0.87.0...0.88.0

0.87.0

What's Changed

New

• Sonar tmpfile codemod by @clavedeluna in #393
• Add pass-thru CLI option for --defectdojo-findings-json by @drdavella in #430
• Update fickling version; removes Torch dependency by @drdavella in #419

Fixed

• Correct node position for FuncDef nodes and fix sonar codemods by @clavedeluna in #423
• Add safeguards for constant subprocess commands by @drdavella in #420

Full Changelog: 0.86.2...0.87.0