Update dependency codemodder to v2 - autoclosed #64

renovate · 2024-08-08T19:48:37Z

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
codemodder	`==0.100.0` -> `==2.6.1`

Release Notes

pixee/codemodder-python (codemodder)

What's Changed

New

New find and fix and sonar codemod for "inverted boolean checks" by @clavedeluna in https://github.com/pixee/codemodder-python/pull/790
Timezone find and fix and sonar codemod by @clavedeluna in https://github.com/pixee/codemodder-python/pull/802

Fixed

CodeTF: change descriptions are optional but must not be empty by @drdavella in https://github.com/pixee/codemodder-python/pull/822
Fix sonar metadata by @drdavella in https://github.com/pixee/codemodder-python/pull/824

Dependencies

Update dependency setuptools to v74 by @renovate in https://github.com/pixee/codemodder-python/pull/813
Update openai requirement from <1.43,>=1.35 to >=1.35,<1.44 by @dependabot in https://github.com/pixee/codemodder-python/pull/817
Update semgrep requirement from <1.86,>=1.85 to >=1.85,<1.87 by @dependabot in https://github.com/pixee/codemodder-python/pull/821

Full Changelog: pixee/codemodder-python@2.2.1...2.3.0

`v2.2.1`

Compare Source

What's Changed

add unit test for sql removal vars by @clavedeluna in https://github.com/pixee/codemodder-python/pull/791
Prevent duplicate codemod catalog entry points by @drdavella in https://github.com/pixee/codemodder-python/pull/811

Full Changelog: pixee/codemodder-python@2.2.0...2.2.1

`v2.2.0`

Compare Source

What's Changed

Update pre-commit hooks by @github-actions in https://github.com/pixee/codemodder-python/pull/782
New Sast Regex transformer by @clavedeluna in https://github.com/pixee/codemodder-python/pull/788

Full Changelog: pixee/codemodder-python@2.1.0...2.2.0

`v2.1.0`

Compare Source

What's Changed

Update pixee/upload-tool-results-action action to v2.3.0 by @renovate in https://github.com/pixee/codemodder-python/pull/783
Update dependency lxml to >=5.3.0,<6.0.0 by @renovate in https://github.com/pixee/codemodder-python/pull/784
fail registration if codemod id is already registered by @clavedeluna in https://github.com/pixee/codemodder-python/pull/787

Full Changelog: pixee/codemodder-python@2.0.1...2.1.0

`v2.0.1`

Compare Source

What's Changed

Fixed

Add provider argument to RemediationCodemod by @drdavella in https://github.com/pixee/codemodder-python/pull/781

Full Changelog: pixee/codemodder-python@2.0.0...2.0.1

`v2.0.0`

Compare Source

What's Changed

This release introduces a major API breaking change due to #780.

New

choose spelling parameterization by @clavedeluna in https://github.com/pixee/codemodder-python/pull/767
Update openai requirement from <1.38,>=1.35 to >=1.35,<1.41 by @dependabot in https://github.com/pixee/codemodder-python/pull/779
Semgrep Nan Injection codemod by @clavedeluna in https://github.com/pixee/codemodder-python/pull/758
Update dependency semgrep to >=1.84,<1.85 by @renovate in https://github.com/pixee/codemodder-python/pull/770
Fix default path include/exclude behavior; update codemod hierarchy by @drdavella in https://github.com/pixee/codemodder-python/pull/780

Full Changelog: pixee/codemodder-python@1.6.0...2.0.0

`v1.6.0`

Compare Source

What's Changed

Update dependency setuptools to v72 by @renovate in https://github.com/pixee/codemodder-python/pull/757
Update dependency semgrep to >=1.82,<1.83 by @renovate in https://github.com/pixee/codemodder-python/pull/762
Transformers should read and write bytes by @clavedeluna in https://github.com/pixee/codemodder-python/pull/765

Full Changelog: pixee/codemodder-python@1.5.0...1.6.0

`v1.5.0`

Compare Source

What's Changed

New

semgrep url sandbox codemod by @clavedeluna in https://github.com/pixee/codemodder-python/pull/754
semgrep remove scrf exempt decorator by @clavedeluna in https://github.com/pixee/codemodder-python/pull/755

Fixed

Use 1-based line numbers for RegexTransformer changes by @drdavella in https://github.com/pixee/codemodder-python/pull/759

Full Changelog: pixee/codemodder-python@1.4.1...1.4.2

`v1.4.1`

Compare Source

`v1.4.0`

Compare Source

What's Changed

New

Prevent multiple SARIF inputs from the same tool by @drdavella in https://github.com/pixee/codemodder-python/pull/742
report semgrep findings and fix findings assertions by @clavedeluna in https://github.com/pixee/codemodder-python/pull/739
Semgrep sql by @clavedeluna in https://github.com/pixee/codemodder-python/pull/741
Up security dependency by @clavedeluna in https://github.com/pixee/codemodder-python/pull/751

Fixed

Use import call modifier pattern for url-sandbox by @drdavella in https://github.com/pixee/codemodder-python/pull/750

Full Changelog: pixee/codemodder-python@1.3.1...1.4.0

`v1.3.1`

Compare Source

What's Changed

Fixed a bug with line matching in xml transformer by @andrecsilva in https://github.com/pixee/codemodder-python/pull/737
Update dependency semgrep to >=1.81,<1.82 by @renovate in https://github.com/pixee/codemodder-python/pull/740

Full Changelog: pixee/codemodder-python@1.3.0...1.3.1

`v1.3.0`

Compare Source

What's Changed

Enable downstream extensibility of UseDefusedXML codemod by @drdavella in https://github.com/pixee/codemodder-python/pull/735
All places when a Change() is created should report findings by @clavedeluna in https://github.com/pixee/codemodder-python/pull/734
Added line only matching option to XMLTransformer by @andrecsilva in https://github.com/pixee/codemodder-python/pull/733
Enable customizable call modifier logic by @drdavella in https://github.com/pixee/codemodder-python/pull/736

Full Changelog: pixee/codemodder-python@1.2.0...1.3.0

`v1.2.0`

Compare Source

What's Changed

Update dependency setuptools to v71 by @renovate in https://github.com/pixee/codemodder-python/pull/718
Update dependency semgrep to >=1.80,<1.81 by @renovate in https://github.com/pixee/codemodder-python/pull/720
Update pre-commit hooks by @github-actions in https://github.com/pixee/codemodder-python/pull/721
Update openai requirement from <1.36,>=1.35 to >=1.35,<1.37 by @dependabot in https://github.com/pixee/codemodder-python/pull/727
Update pre-commit hooks by @github-actions in https://github.com/pixee/codemodder-python/pull/725
Regex Transformer by @clavedeluna in https://github.com/pixee/codemodder-python/pull/729

Full Changelog: pixee/codemodder-python@1.1.2...1.2.0

`v1.1.2`

Compare Source

What's Changed

tmpdir should always be type Path by @clavedeluna in https://github.com/pixee/codemodder-python/pull/716
allow testing api to check for min changes by @clavedeluna in https://github.com/pixee/codemodder-python/pull/717

Full Changelog: pixee/codemodder-python@1.1.1...1.1.2

`v1.1.1`

Compare Source

What's Changed

do not raise ValueError if no resource by @clavedeluna in https://github.com/pixee/codemodder-python/pull/715
Update pre-commit hooks by @github-actions in https://github.com/pixee/codemodder-python/pull/714

Full Changelog: pixee/codemodder-python@1.1.0...1.1.1

`v1.1.0`

Compare Source

What's Changed

semgrep django set secure cookie codemod by @clavedeluna in https://github.com/pixee/codemodder-python/pull/709
Semgrep harden pyyaml by @clavedeluna in https://github.com/pixee/codemodder-python/pull/710
New RSA key size transformer and semgrep codemod by @clavedeluna in https://github.com/pixee/codemodder-python/pull/711
Handle detection of SARIFs that have UTF-8 BOMs by @drdavella in https://github.com/pixee/codemodder-python/pull/713

Full Changelog: pixee/codemodder-python@1.0.0...1.1.0

`v1.0.0`

Compare Source

What's Changed

This release introduces two backwards-incompatible changes:

Core "pixee" codemods can no longer be requested by name alone
Some Sonar codemods no longer encode the Sonar rule ID in the codemod name

The codemod API has been mature for quite some time and It seemed as good a time as any to officially bump to v1.0.0 🎉

New

first semgrep sarif codemod for jinja autoescape by @clavedeluna in https://github.com/pixee/codemodder-python/pull/687
Deprecate requesting codemods by name by @clavedeluna in https://github.com/pixee/codemodder-python/pull/699
Semgrep jwt decode verify by @clavedeluna in https://github.com/pixee/codemodder-python/pull/696
Semgrep defused xml codemod by @clavedeluna in https://github.com/pixee/codemodder-python/pull/705
remove -ID from sonar codemod n by @clavedeluna in https://github.com/pixee/codemodder-python/pull/704
Semgrep subprocess shell False codemod by @clavedeluna in https://github.com/pixee/codemodder-python/pull/706

Full Changelog: pixee/codemodder-python@0.106.4...1.0.0

`v0.106.4`

Compare Source

What's Changed

Update diff line number change calculation by @clavedeluna in https://github.com/pixee/codemodder-python/pull/670

Full Changelog: pixee/codemodder-python@0.106.3...0.106.4

`v0.106.3`

Compare Source

What's Changed

Update security requirement from ~=1.2.0 to >=1.2,<1.4 by @dependabot in https://github.com/pixee/codemodder-python/pull/663
Update injected security dependency and remanage updates by @clavedeluna in https://github.com/pixee/codemodder-python/pull/666
Make provider resources more general by @drdavella in https://github.com/pixee/codemodder-python/pull/667

Full Changelog: pixee/codemodder-python@0.106.2...0.106.3

`v0.106.2`

Compare Source

What's Changed

All tests will validate codemod registration by @clavedeluna in https://github.com/pixee/codemodder-python/pull/656

Full Changelog: pixee/codemodder-python@0.106.1...0.106.2

`v0.106.1`

Compare Source

What's Changed

Fix handling of LLM model environment variables by @drdavella in https://github.com/pixee/codemodder-python/pull/657

Full Changelog: pixee/codemodder-python@0.106.0...0.106.1

`v0.106.0`

Compare Source

What's Changed

New

Check file paths passed on as tool findings by @clavedeluna in https://github.com/pixee/codemodder-python/pull/637
Support parsing/writing pyproject.toml with poetry by @clavedeluna in https://github.com/pixee/codemodder-python/pull/646
Removed unused handles in file-resource-leak by @andrecsilva in https://github.com/pixee/codemodder-python/pull/648
Add type stub dependencies by @clavedeluna in https://github.com/pixee/codemodder-python/pull/651

Full Changelog: pixee/codemodder-python@0.105.0...0.106.0

`v0.105.0`

Compare Source

What's Changed

Allow arbitrary filtering of codemod registry by @drdavella in https://github.com/pixee/codemodder-python/pull/628
Update openai and test codemodder without it by @clavedeluna in https://github.com/pixee/codemodder-python/pull/624
Implement provider registry by @drdavella in https://github.com/pixee/codemodder-python/pull/633

Full Changelog: pixee/codemodder-python@0.104.0...0.105.0

`v0.104.0`

Compare Source

What's Changed

Fixed a bug, adjusted tests by @andrecsilva in https://github.com/pixee/codemodder-python/pull/615
Remove additional redundant remediation text by @drdavella in https://github.com/pixee/codemodder-python/pull/622
LLM and test refactor by @clavedeluna in https://github.com/pixee/codemodder-python/pull/623

Full Changelog: pixee/codemodder-python@0.103.1...0.104.0

`v0.103.1`

Compare Source

What's Changed

Fixed

Remove redundant Sonar prefix in CodeTF summary by @drdavella in https://github.com/pixee/codemodder-python/pull/606
Skip symlinks for analysis by @drdavella in https://github.com/pixee/codemodder-python/pull/611

Full Changelog: pixee/codemodder-python@0.103.0...0.103.1

`v0.103.0`

Compare Source

What's Changed

XML transformer by @clavedeluna in https://github.com/pixee/codemodder-python/pull/598
Update XML writing by @clavedeluna in https://github.com/pixee/codemodder-python/pull/599

Full Changelog: pixee/codemodder-python@0.102.0...0.103.0

`v0.102.0`

Compare Source

What's Changed

Refactor Sarif Result by @clavedeluna in https://github.com/pixee/codemodder-python/pull/583
mkdir codemod fixes by @clavedeluna in https://github.com/pixee/codemodder-python/pull/586
Enable use of Azure OpenAI client by @drdavella in https://github.com/pixee/codemodder-python/pull/592

Full Changelog: pixee/codemodder-python@0.101.2...0.102.0

`v0.101.2`

Compare Source

What's Changed

Fixed

Redo tempfile.mktemp codemod by @clavedeluna in https://github.com/pixee/codemodder-python/pull/577

Full Changelog: pixee/codemodder-python@0.101.1...0.101.2

`v0.101.1`

Compare Source

What's Changed

Some fixes for XMLTransformer and Pipeline by @andrecsilva in https://github.com/pixee/codemodder-python/pull/585

Full Changelog: pixee/codemodder-python@0.101.0...0.101.1

`v0.101.0`

Compare Source

What's Changed

New

XML Transformer and Pipeline by @andrecsilva in https://github.com/pixee/codemodder-python/pull/584

Full Changelog: pixee/codemodder-python@0.100.0...0.101.0

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

sonarqubecloud · 2024-10-08T21:15:44Z

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarCloud

renovate bot force-pushed the renovate/codemodder-2.x branch 3 times, most recently from 09929d3 to ff3f414 Compare August 15, 2024 14:07

renovate bot force-pushed the renovate/codemodder-2.x branch from ff3f414 to afde706 Compare August 22, 2024 18:39

renovate bot force-pushed the renovate/codemodder-2.x branch 3 times, most recently from 96ef056 to 1307d18 Compare September 12, 2024 14:44

renovate bot force-pushed the renovate/codemodder-2.x branch from 1307d18 to 454bdd4 Compare September 23, 2024 01:46

Update dependency codemodder to v2

6ba791f

renovate bot force-pushed the renovate/codemodder-2.x branch from 454bdd4 to 6ba791f Compare October 8, 2024 21:15

renovate bot changed the title ~~Update dependency codemodder to v2~~ Update dependency codemodder to v2 - autoclosed Oct 10, 2024

renovate bot closed this Oct 10, 2024

renovate bot deleted the renovate/codemodder-2.x branch October 10, 2024 23:11

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Update dependency codemodder to v2 - autoclosed #64

Update dependency codemodder to v2 - autoclosed #64

renovate bot commented Aug 8, 2024 •

edited

Loading

sonarqubecloud bot commented Oct 8, 2024

Update dependency codemodder to v2 - autoclosed #64

Update dependency codemodder to v2 - autoclosed #64

Conversation

renovate bot commented Aug 8, 2024 • edited Loading

Release Notes

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

New

Fixed

Dependencies

What's Changed

What's Changed

What's Changed

What's Changed

Fixed

What's Changed

New

What's Changed

What's Changed

New

Fixed

What's Changed

New

Fixed

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

New

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

New

What's Changed

What's Changed

What's Changed

Fixed

What's Changed

What's Changed

What's Changed

Fixed

What's Changed

What's Changed

New

Configuration

sonarqubecloud bot commented Oct 8, 2024

Quality Gate passed

renovate bot commented Aug 8, 2024 •

edited

Loading