0.101.0

What's Changed

New

• XML Transformer and Pipeline by @andrecsilva in #584

Full Changelog: 0.100.0...0.101.0

0.100.0

What's Changed

New

• Populate Sonar findings by @clavedeluna in #567

Fixed

• Do not add hashes to requirements.txt by @drdavella in #571

Full Changelog: 0.99.0...0.100.0

0.99.0

What's Changed

New

• Codemod for disabling GraphQL introspection by @andrecsilva in #542
• Adds extraction of code flows and related locations by @andrecsilva in #561
• Report unfixed when parsing/transforming errors by @clavedeluna in #557

Full Changelog: 0.98.1...0.99.0

0.98.1

What's Changed

• Fixed findings should be a list by @drdavella in #558

Full Changelog: 0.98.0...0.98.1

0.98.0

What's Changed

New

• support >2 or's in CombineStartswithEndswith, args joined to tuple no duplicates by @LucasFaudman in #493
• Add new CodeMod CombineIsinstanceIssubclass. isistance(x, str) or isnstance(x, (bytes, list)) -> isinstance(x, (str, bytes, list)) by @LucasFaudman in #494

Fixed

• Fix spacing in codemod description by @drdavella in #547
• Make ai metadata fields optional by @drdavella in #548
• parse codeql results without region by @clavedeluna in #546
• Updating importance level by @whodes in #549
• prevent SubprocessShellFalse from causing FileNotFoundError when 1st arg is string by @LucasFaudman in #492

New Contributors

• @LucasFaudman made their first contribution in #493
• @whodes made their first contribution in #549

Full Changelog: 0.97.1...0.98.0

0.97.1

What's Changed

Fixed

• Handle case where CodeQL location doesn't have region by @drdavella in #532

Full Changelog: 0.97.0...0.97.1

0.97.0

What's Changed

New

• 🚚 Migrate to Supported Codemod Preference by @gilday in #520
• Better detection for existing imports for harden-pyyaml by @andrecsilva in #518
• CLI: only pixee codemods can be requested by name by @clavedeluna in #515
• Adds a codemod that removes break or continue statements out of loop by @andrecsilva in #527
• Add parser/detector for CodeQL SARIF files by @drdavella in #531

Fixed

• Fixes flaky django dunder tests by @andrecsilva in #526

New Contributors

• @gilday made their first contribution in #520

Full Changelog: 0.96.0...0.97.0

0.96.0

What's Changed

New

• Add pass-thru flag for Contrast Assess vulnerabilities XML by @drdavella in #505
• Add fixed/unfixed finding metadata support; populate for defectdojo by @drdavella in #501
• Add optional AI metadata to changeset entries by @drdavella in #509
• New Sonar codemod for django model without dunder str by @clavedeluna in #498

Fixed

• Gracefully handle errors that occur during transformation by @drdavella in #510

Full Changelog: 0.95.0...0.96.0

0.95.0

What's Changed

New

• Adds sonar version of SQLParameterizer codemod by @andrecsilva in #495

Fixed

• fix lazy logging codemod bug with acceptable concatnation by @clavedeluna in #497

Full Changelog: 0.94.0...0.95.0

0.94.0

What's Changed

• Update codetf bindings by @drdavella in #490

Full Changelog: 0.93.0...0.94.0