Skip to content

Releases: pixee/codemodder-java

v0.97.0

15 Oct 13:19
364702d
Compare
Choose a tag to compare
Refactors SQL Remediator and Codemods & HQL Transformation Bugfix (#456)

Refactors SQL injection codemods to use the new remediator API and fixes
a HQL transformation bug.

v0.96.0

02 Oct 13:17
6fc81f2
Compare
Choose a tag to compare
New Sonar SSRF codemod (#449)

/close #work

Could not find any examples of sonar findings for SSRF vulnerabilities
using `Url` or `HTTPUrlConnection`. This codemod only covers
vulnerabilities found using the `RestTemplate` class from spring.

v0.95.0

19 Sep 00:07
9196cb2
Compare
Choose a tag to compare
:sparkles: Open Source Semgrep codemods (#448)

- **:truck: open source semgrep codemods**
- **:sparkles: add semgrep codemods**

v0.94.1

18 Sep 19:51
50cf515
Compare
Choose a tag to compare
Added check for existing overrides in add-missing-override (#447)

If you have multiple findings of the same rule for the same location,
some codemods will duplicate their fixes.

This PR adds a patch to stop this for the `add-missing-override`
codemod.

v0.94.0

23 Aug 17:14
22caa90
Compare
Choose a tag to compare
✨ Support CodeTF Findings Without IDs (#443)

When a finding has no ID, we prefer to reflect this in CodeTF vs make up
a new ID that is not significant to the tool that produced the finding.

/towards ISS-1837

v0.93.1

22 Aug 00:55
eb9084a
Compare
Choose a tag to compare
⬆️ Use Correct Encoding Type for GPT-4o (#441)

Upgraded jtokkit to a newer version that supports the encoding type we
need.

v0.93.0

15 Aug 13:21
f067232
Compare
Choose a tag to compare
Added remediators and improved method searching flexibility (#437)

v0.92.3

01 Aug 15:18
42f1f73
Compare
Choose a tag to compare
More graceful failure when expected files are missing in Semgrep (#436)

Although some use cases are very strict about SARIF-referenced files
being present, others aren't (like testing) -- we should handle this
more gracefully.

v0.92.2

27 Jul 20:22
35ba4a8
Compare
Choose a tag to compare
Added XXE remediation at intermediate events (#433)

Also added tests, a. common reporter, etc.

v0.92.1

26 Jul 19:45
848ff93
Compare
Choose a tag to compare
Added a Java deserialization remediator (#432)