Skip to content

Releases: pixee/codemodder-java

v0.92.1

26 Jul 19:45
848ff93
Compare
Choose a tag to compare
Added a Java deserialization remediator (#432)

v0.92.0

25 Jul 21:08
a069684
Compare
Choose a tag to compare
:arrow_up: upgrade codetf (#431)

v0.91.0

25 Jul 13:27
964f558
Compare
Choose a tag to compare
Create result entries even when no changes (#429)

The primary purpose of this change is to enable the collection of
codemod descriptions even when no actual changes are present. It also
aligns codemodder-java with the existing behavior of codemodder-python.

v0.90.1

23 Jul 13:47
bf886d3
Compare
Choose a tag to compare
:sparkles: Support multiple rule names for AppScan (#428)

- **:sparkles: support muitiple rule names in AppScan**
- **:bulb: Improve docs for AppScan getRule accessor**

v0.90.0

18 Jul 20:09
6670a3d
Compare
Choose a tag to compare
:bug: Defensive  null check  (#424)

- **:recycle: provide messageText to all RuleSarifFactory impls**
- **Bind AppScan sarif to rule by rule name from message text**
- **:bug: fix distinct rule ID bug**
- **:bug: defensive null check**

v0.89.2

17 Jul 21:08
4a98fa1
Compare
Choose a tag to compare
:sparkles: allow SARIF to be bound from multiple rule IDs (#421)

v0.89.1

11 Jul 21:02
785ead7
Compare
Choose a tag to compare
Skip SensitiveDataLoggingCodemod when LLM not available (#419)

This codemod does not inherit from the base class with the existing
check so it did not benefit from the work in #418.

v0.89.0

11 Jul 19:59
02b25a8
Compare
Choose a tag to compare
Skip LLM codemods when no service is available (#418)

v0.88.1

10 Jul 17:37
c58ccf3
Compare
Choose a tag to compare
Add gpt-4-turbo model; use for code changing (#416)

Without function calling, we need to use models that support
`json_object` as a response format.

At some point we should revisit function calling with the new client,
but it seems substantially more complicated than the old API. It also
appears to be deprecated in favor of "tool calling"":

> For function call sample, see [function
call](https://github.com/Azure/azure-sdk-for-java/tree/azure-ai-openai_1.0.0-beta.10/sdk/openai/azure-ai-openai/src/samples/java/com/azure/ai/openai/ChatCompletionsFunctionCall.java).
However, they are considered a legacy feature. Using tools is the
preferred way. For more details see sample [tool
calls](https://github.com/Azure/azure-sdk-for-java/blob/azure-ai-openai_1.0.0-beta.10/sdk/openai/azure-ai-openai/src/samples/java/com/azure/ai/openai/usage/GetChatCompletionsToolCallSample.java).


https://learn.microsoft.com/en-us/java/api/overview/azure/ai-openai-readme?view=azure-java-preview#chat-completions

v0.88.0

10 Jul 15:08
98991c0
Compare
Choose a tag to compare
Enable compatibility with Azure OpenAI (#415)