0.88.0

What's Changed

New

• Support sonar hotspots and secure-random sonar hotspot rule by @clavedeluna in #433
• Sonar jinja2 by @clavedeluna in #435
• Implement prototype codemods for DefectDojo remediation by @drdavella in #438

Full Changelog: 0.87.0...0.88.0

0.87.0

What's Changed

New

• Sonar tmpfile codemod by @clavedeluna in #393
• Add pass-thru CLI option for --defectdojo-findings-json by @drdavella in #430
• Update fickling version; removes Torch dependency by @drdavella in #419

Fixed

• Correct node position for FuncDef nodes and fix sonar codemods by @clavedeluna in #423
• Add safeguards for constant subprocess commands by @drdavella in #420

Full Changelog: 0.86.2...0.87.0

0.86.2

What's Changed

• Handle requirements.txt file with -r line by @clavedeluna in #416

Full Changelog: 0.86.1...0.86.2

0.86.1

What's Changed

Fixes

• log zero files analyzed if no codemods were selected by @clavedeluna in #392
• Fix enable-jinja2-autoescape when kwargs can't be known by @drdavella in #397
• Fix generated diff when adding hashes to requirements.txt by @drdavella in #403

New Contributors

• @maxArturo made their first contribution in #386

Full Changelog: 0.86.0...0.86.1

0.86.0

What's Changed

New

• Adds support for format operators in SQLQueryParameterization by @andrecsilva in #361
• New codemod to add missing self/cls by @clavedeluna in #355
• Codemodder CLI can handle non-existent requested codemods by @clavedeluna in #384
• Add pass-thru option for Sonar hotspots JSON by @drdavella in #395

Full Changelog: 0.85.1...0.86.0

v0.85.1

What's Changed

Fixed

• Expose ToolMetadata via public codemodder.codemods.api (#380)

Full Changelog: 0.85.0...0.85.1

v0.85.0

What's Changed

New

• New codemod to fix dataclass defaults by @clavedeluna in #350
• Use Pydantic to generate and validate CodeTF data models by @drdavella in #357
• Add detection tool metadata to CodeTF results by @drdavella in #366

Full Changelog: 0.84.0...0.85.0

v0.84.0

What's Changed

New Codemods

• jwt.decode sonar codemod by @clavedeluna in #326
• Replace hasattr(obj, "__call__") with callable by @clavedeluna in #329
• harden-pickle-load by @drdavella in #332

Fixed

• Enhance fix-deprecated-abstractproperty codemod by @clavedeluna in #328
• Normalize Sonar paths to base directory path by @drdavella in #345

Full Changelog: 0.83.0...0.84.0

v0.83.0

What's Changed

New

• Updates to enable SAST remediation support by @drdavella in #319

Fixed

• Ensure all codemods have non-empty change descriptions by @drdavella in #323
• Update filtering logic for subprocess-shell-false by @drdavella in #324

Full Changelog: 0.82.1...0.83.0

v0.82.1

What's Changed

Fixed

• Fix harden-pyyaml to handle bad default by @drdavella in #317
• Add filtering logic to use-defusedxml transformation by @drdavella in #318

Full Changelog: 0.82.0...0.82.1