2.0.1

What's Changed

Fixed

• Add provider argument to RemediationCodemod by @drdavella in #781

Full Changelog: 2.0.0...2.0.1

2.0.0

What's Changed

This release introduces a major API breaking change due to #780.

New

• choose spelling parameterization by @clavedeluna in #767
• Update openai requirement from <1.38,>=1.35 to >=1.35,<1.41 by @dependabot in #779
• Semgrep Nan Injection codemod by @clavedeluna in #758
• Update dependency semgrep to >=1.84,<1.85 by @renovate in #770
• Fix default path include/exclude behavior; update codemod hierarchy by @drdavella in #780

Full Changelog: 1.6.0...2.0.0

1.6.0

What's Changed

• Update dependency setuptools to v72 by @renovate in #757
• Update dependency semgrep to >=1.82,<1.83 by @renovate in #762
• Transformers should read and write bytes by @clavedeluna in #765

Full Changelog: 1.5.0...1.6.0

1.5.0

What's Changed

New

• semgrep url sandbox codemod by @clavedeluna in #754
• semgrep remove scrf exempt decorator by @clavedeluna in #755

Fixed

• Use 1-based line numbers for RegexTransformer changes by @drdavella in #759

Full Changelog: 1.4.1...1.4.2

1.4.1

Revert "Update dependency setuptools to v72" (#756)

Revert "Update dependency setuptools to v72 (#752)"

This reverts commit f1073926ef3c412c1d8a0c954394e7c60caa4349.

1.4.0

What's Changed

New

• Prevent multiple SARIF inputs from the same tool by @drdavella in #742
• report semgrep findings and fix findings assertions by @clavedeluna in #739
• Semgrep sql by @clavedeluna in #741
• Up security dependency by @clavedeluna in #751

Fixed

• Use import call modifier pattern for url-sandbox by @drdavella in #750

Full Changelog: 1.3.1...1.4.0

1.3.1

What's Changed

• Fixed a bug with line matching in xml transformer by @andrecsilva in #737
• Update dependency semgrep to >=1.81,<1.82 by @renovate in #740

Full Changelog: 1.3.0...1.3.1

1.3.0

What's Changed

• Enable downstream extensibility of UseDefusedXML codemod by @drdavella in #735
• All places when a Change() is created should report findings by @clavedeluna in #734
• Added line only matching option to XMLTransformer by @andrecsilva in #733
• Enable customizable call modifier logic by @drdavella in #736

Full Changelog: 1.2.0...1.3.0

1.2.0

What's Changed

• Update dependency setuptools to v71 by @renovate in #718
• Update dependency semgrep to >=1.80,<1.81 by @renovate in #720
• Update pre-commit hooks by @github-actions in #721
• Update openai requirement from <1.36,>=1.35 to >=1.35,<1.37 by @dependabot in #727
• Update pre-commit hooks by @github-actions in #725
• Regex Transformer by @clavedeluna in #729

Full Changelog: 1.1.2...1.2.0

1.1.2

What's Changed

• tmpdir should always be type Path by @clavedeluna in #716
• allow testing api to check for min changes by @clavedeluna in #717

Full Changelog: 1.1.1...1.1.2