Skip to content

PyVizAST Release 0.6.3

Choose a tag to compare

View all tags
@ChidcGithub ChidcGithub released this 11 Mar 04:40
· 50 commits to main since this release
v0.6.3
d8f7f64

The next release (0.7.0 & 1.0.0-alpha) will contain a load of new features, so it may takes a few days to finish.

Bug Fixes & Security Improvements

Bug Fixes:

  • Fixed CI installation failure in GitHub Actions workflow
    • Changed from pip install git+https://... to local pip install -r requirements.txt
    • Project doesn't have setup.py, so git install was failing

Security Improvements:

  • Enhanced path traversal detection in security analyzer
    • Added detection for path construction with format strings
    • Added detection for str.join() with path separators
    • Added detection for f-string path construction
    • Improved os.path.join user input validation warnings

Documentation:

  • Updated Node.js requirement to 18+ (matching CI configuration)

Files Modified:

  • .github/workflows/analyze.yml - Fixed CI installation
  • backend/analyzers/security.py - Enhanced path traversal checks
  • backend/main.py - Version bump to 0.6.3
  • frontend/package.json - Version bump to 0.6.3
  • README.md - Version badge and changelog update
Assets 2
Loading