0.92.1

Short circuit faster when no tool results are available (#483)

0.92.0

What's Changed

• use-walrus-if codemod can handle unused variables by @clavedeluna in #477
• fix-dataclass-defaults can handle populated defaults by @clavedeluna in #479
• Codemod to fix math.isclose comparison to 0 by @clavedeluna in #475
• Enable per-codemod configuration of included files by @drdavella in #480
• add language metadata field by @clavedeluna in #482

Full Changelog: 0.91.0...0.92.0

0.91.0

What's Changed

• Add LLM client to context and optional dependency on OpenAI by @drdavella in #467

Full Changelog: 0.90.0...0.91.0

0.90.0

What's Changed

• Change default behavior for Semgrep and ResultSet by @drdavella in #461
• Remove restriction on ".py" filename suffix by @drdavella in #466

Full Changelog: 0.89.0...0.90.0

0.89.0

What's Changed

New

• sonar url-sandbox by @clavedeluna in #445
• New find-and-fix and sonar codemod for floating point equality by @clavedeluna in #450
• Add detection and processing for external Semgrep SARIF files by @drdavella in #459
• Support simple patterns for codemod include/exclude by @drdavella in #458

Fixed

• Fix typo in docs for bad-lock-with-statement by @drdavella in #449
• walrus if codemod can handle if not operations by @clavedeluna in #452

Full Changelog: 0.88.0...0.89.0

0.88.0

What's Changed

New

• Support sonar hotspots and secure-random sonar hotspot rule by @clavedeluna in #433
• Sonar jinja2 by @clavedeluna in #435
• Implement prototype codemods for DefectDojo remediation by @drdavella in #438

Full Changelog: 0.87.0...0.88.0

0.87.0

What's Changed

New

• Sonar tmpfile codemod by @clavedeluna in #393
• Add pass-thru CLI option for --defectdojo-findings-json by @drdavella in #430
• Update fickling version; removes Torch dependency by @drdavella in #419

Fixed

• Correct node position for FuncDef nodes and fix sonar codemods by @clavedeluna in #423
• Add safeguards for constant subprocess commands by @drdavella in #420

Full Changelog: 0.86.2...0.87.0

0.86.2

What's Changed

• Handle requirements.txt file with -r line by @clavedeluna in #416

Full Changelog: 0.86.1...0.86.2

0.86.1

What's Changed

Fixes

• log zero files analyzed if no codemods were selected by @clavedeluna in #392
• Fix enable-jinja2-autoescape when kwargs can't be known by @drdavella in #397
• Fix generated diff when adding hashes to requirements.txt by @drdavella in #403

New Contributors

• @maxArturo made their first contribution in #386

Full Changelog: 0.86.0...0.86.1

0.86.0

What's Changed

New

• Adds support for format operators in SQLQueryParameterization by @andrecsilva in #361
• New codemod to add missing self/cls by @clavedeluna in #355
• Codemodder CLI can handle non-existent requested codemods by @clavedeluna in #384
• Add pass-thru option for Sonar hotspots JSON by @drdavella in #395

Full Changelog: 0.85.1...0.86.0