2.6.0

What's Changed

• Update dependency openai to >=1.45,<1.46 by @renovate in #832
• Update dependency setuptools to v75 by @renovate in #836
• Update pre-commit hooks by @github-actions in #835
• Update dependency openai to >=1.46,<1.47 by @renovate in #839
• Update dependency semgrep to >=1.87,<1.88 by @renovate in #834
• Update dependency semgrep to >=1.88,<1.89 by @renovate in #842
• (Sonar) Fixed finding: "Boolean checks should not be inverted" by @pixeebot in #841
• Core codemods should ignore site-packages directories by @drdavella in #846

Full Changelog: 2.5.0...2.6.0

2.5.0

What's Changed

• New Semgrep codemod: sandbox process creation by @drdavella in #831

Full Changelog: 2.4.0...2.5.0

2.4.0

What's Changed

• Update dependency pydantic to ~=2.9.0 by @renovate in #823
• Update dependency openai to >=1.44,<1.45 by @renovate in #828
• New codemod: Sonar pythonsecurity:S2076 by @drdavella in #830

Full Changelog: 2.3.0...2.4.0

2.3.0

What's Changed

New

• New find and fix and sonar codemod for "inverted boolean checks" by @clavedeluna in #790
• Timezone find and fix and sonar codemod by @clavedeluna in #802

Fixed

• CodeTF: change descriptions are optional but must not be empty by @drdavella in #822
• Fix sonar metadata by @drdavella in #824

Dependencies

• Update dependency setuptools to v74 by @renovate in #813
• Update openai requirement from <1.43,>=1.35 to >=1.35,<1.44 by @dependabot in #817
• Update semgrep requirement from <1.86,>=1.85 to >=1.85,<1.87 by @dependabot in #821

Full Changelog: 2.2.1...2.3.0

2.2.1

What's Changed

• add unit test for sql removal vars by @clavedeluna in #791
• Prevent duplicate codemod catalog entry points by @drdavella in #811

Full Changelog: 2.2.0...2.2.1

2.2.0

What's Changed

• Update pre-commit hooks by @github-actions in #782
• New Sast Regex transformer by @clavedeluna in #788

Full Changelog: 2.1.0...2.2.0

2.1.0

What's Changed

• Update pixee/upload-tool-results-action action to v2.3.0 by @renovate in #783
• Update dependency lxml to >=5.3.0,<6.0.0 by @renovate in #784
• fail registration if codemod id is already registered by @clavedeluna in #787

Full Changelog: 2.0.1...2.1.0

2.0.1

What's Changed

Fixed

• Add provider argument to RemediationCodemod by @drdavella in #781

Full Changelog: 2.0.0...2.0.1

2.0.0

What's Changed

This release introduces a major API breaking change due to #780.

New

• choose spelling parameterization by @clavedeluna in #767
• Update openai requirement from <1.38,>=1.35 to >=1.35,<1.41 by @dependabot in #779
• Semgrep Nan Injection codemod by @clavedeluna in #758
• Update dependency semgrep to >=1.84,<1.85 by @renovate in #770
• Fix default path include/exclude behavior; update codemod hierarchy by @drdavella in #780

Full Changelog: 1.6.0...2.0.0

1.6.0

What's Changed

• Update dependency setuptools to v72 by @renovate in #757
• Update dependency semgrep to >=1.82,<1.83 by @renovate in #762
• Transformers should read and write bytes by @clavedeluna in #765

Full Changelog: 1.5.0...1.6.0