0.7.0

What's Changed

• Add some logging of the start and end of the run by @ericwb in #616
• Add support of mkdocs macros by @ericwb in #617
• Add last updated date on doc pages by @ericwb in #618
• Update pre-commit hooks to latest versions by @ericwb in #619
• Remove inconsistent divider in argparse rule by @ericwb in #620
• Fix up not_in_nav errors from mkdocs by @ericwb in #621
• Honor umask in calculating effective mode by @ericwb in #622
• Bump rich from 13.9.1 to 13.9.2 by @dependabot in #623
• Add Python 3.13 to unit test matrix by @ericwb in #624
• Show support of Python 3.13 by @ericwb in #625

Full Changelog: 0.6.7...0.7.0

0.6.7

What's Changed

• Fix typo in the example output by @ericwb in #595
• New rule to check socket.create_connection with no timeout by @ericwb in #598
• SocketNoTimeout needs to check for 0 and negative timeouts by @ericwb in #599
• New rule to check for no timeout use in smtplib by @ericwb in #600
• SocketNoTimeout doesn't need to check for 0 or negative values by @ericwb in #601
• Add doc for new smtplib no timeout rule by @ericwb in #602
• The smtplib starttls context arg is always a kwarg by @ericwb in #603
• New Python rule to check for imaplib use without a timeout by @ericwb in #604
• New rule to check nntplib for use without a timeout by @ericwb in #605
• New Python rule to check poplib use without timeout by @ericwb in #606
• New Python rule checks use of Telnet with no timeout by @ericwb in #607
• New Python rule checks ftplib use without a timeout by @ericwb in #608
• New Python rule checks for ssl use with no timeout by @ericwb in #609
• Enhance timeout rules ot honor the global timeout by @ericwb in #610
• Bump rich from 13.8.1 to 13.9.1 by @dependabot in #612
• Automatically update the copyright year by @ericwb in #613
• Some nit fixing up of the man page by @ericwb in #614
• Fix broken handling of file via stdin by @ericwb in #615

Full Changelog: 0.6.6...0.6.7

0.6.6

What's Changed

• Bump tree-sitter-java from 0.21.0 to 0.23.2 by @dependabot in #580
• Bump tree-sitter-go from 0.23.0 to 0.23.1 by @dependabot in #581
• Bump tree-sitter-python from 0.23.0 to 0.23.2 by @dependabot in #582
• Support augmented assignments and parenthesized expressions by @ericwb in #584
• Fix augmented assignment by @ericwb in #585
• Bump actions/attest-build-provenance from 1.4.2 to 1.4.3 by @dependabot in #586
• Bump rich from 13.8.0 to 13.8.1 by @dependabot in #588
• New python rule to check for setuid(0) by @ericwb in #589
• New Golang rule to check for Setuid to root user by @ericwb in #590
• Remove unnecessary init of wildcards by @ericwb in #591
• Cleanup copy-and-paste typos in syscall.Setuid rule by @ericwb in #592
• Fix invalid links in docs by @ericwb in #593
• Wrong line number in syscall.Setuid rule example by @ericwb in #594

Full Changelog: 0.6.5...0.6.6

0.6.5

What's Changed

• Update to the latest tree-sitter by @ericwb in #579

Full Changelog: 0.6.4...0.6.5

0.6.4

What's Changed

• Get file encoding using artifact contents by @ericwb in #577

Full Changelog: 0.6.3...0.6.4

0.6.3

What's Changed

• Bump rich from 13.7.1 to 13.8.0 by @dependabot in #572
• Remove the unnecessary console object on Run by @ericwb in #574
• Only load file if artifact content is none by @ericwb in #576

Full Changelog: 0.6.2...0.6.3

0.6.2

What's Changed

• More typing error fixes by @ericwb in #547
• Use ubuntu latest for readthedocs build by @qheck in #548
• Set types on args of setters by @qheck in #549
• More type fixes by @ericwb in #550
• Add repo activity to README by @ericwb in #552
• Bump actions/attest-build-provenance from 1.4.0 to 1.4.1 by @dependabot in #553
• Add example of running command as animated gif by @ericwb in #554
• Disable animated example gif to loop by @ericwb in #555
• Bump tree-sitter-go from 0.21.0 to 0.21.2 by @dependabot in #557
• Add example code to Readme for clear example by @ericwb in #558
• Remove repo activity in README by @ericwb in #559
• Move README build badge above divider by @ericwb in #560
• Add links to App and Action by @ericwb in #561
• Add CWE for permissions and token for binary op by @ericwb in #562
• Bump actions/attest-build-provenance from 1.4.1 to 1.4.2 by @dependabot in #563
• Refactor how wildcard imports are processed by @ericwb in #564
• Second pass at refactoring wildcard logic by @ericwb in #565
• Rename tokens to node types by @ericwb in #566
• Refactor Cwe class to be more pythonic by @ericwb in #567
• Add new rule around loose permission in os module by @ericwb in #556
• Fix raised exceptions in edge cases of incorrect permissions by @ericwb in #568
• New rule for pathlib.Path usage with loose permissions by @ericwb in #569
• Fix for typo in pathlib rule example output by @ericwb in #570

New Contributors

• @qheck made their first contribution in #548

Full Changelog: 0.6.1...0.6.2

0.6.1

What's Changed

• Bump actions/attest-build-provenance from 1.3.3 to 1.4.0 by @dependabot in #544
• Add Windows support and unit testing by @ericwb in #546

Full Changelog: 0.6.0...0.6.1

0.6.0

What's Changed

• tree-sitter-python requires manual install on arm macOS by @ericwb in #545

Full Changelog: 0.5.13...0.6.0

0.5.13

What's Changed

• Some cosmetic changes to docs by @ericwb in #537
• Resolve hex, ord, and binary forms of an integer by @ericwb in #538
• Use extension loader to load renderers by @ericwb in #542
• Bump to latest version of tree-sitter by @ericwb in #543

Full Changelog: 0.5.12...0.5.13