Update dependency codemodder to v6

[renovate]

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Confidence
codemodder	==0.100.0 → ==6.5.5

---

Release Notes

pixee/codemodder-python (codemodder)

v6.5.5

Compare Source

What's Changed

• Update dependency pytest-randomly to v4 by @​renovate[bot] in #​1095
• Update all non-major dependencies by @​renovate[bot] in #​1092
• Update dependency pytest-cov to v7 by @​renovate[bot] in #​1094
• Update dependency python-json-logger to v4 by @​renovate[bot] in #​1099
• Update stefanzweifel/git-auto-commit-action action to v7 by @​renovate[bot] in #​1103
• Update dependency pylint to v4 by @​renovate[bot] in #​1102
• Update all non-major dependencies by @​renovate[bot] in #​1100

Full Changelog: pixee/codemodder-python@6.5.4...6.5.5

v6.5.4

Compare Source

What's Changed

• Update actions/setup-python action to v6 by @​renovate[bot] in #​1093
• ISS-4459/add blocked and oos by @​chasefarmer-pixee in #​1096

New Contributors

• @​chasefarmer-pixee made their first contribution in #​1096

Full Changelog: pixee/codemodder-python@6.5.3...6.5.4

v6.5.3

Compare Source

What's Changed

• Update all non-major dependencies by @​renovate[bot] in #​1088
• Update actions/checkout action to v5 by @​renovate[bot] in #​1089
• Update all non-major dependencies by @​renovate[bot] in #​1090
• remove LLM client configs by @​clavedeluna in #​1091

Full Changelog: pixee/codemodder-python@6.5.2...6.5.3

v6.5.2

Compare Source

What's Changed

• Update all non-major dependencies by @​renovate[bot] in #​1086
• Fixed prompt tokens not being accounted in CodeTF v2 to v3 conversion by @​andrecsilva in #​1087

Full Changelog: pixee/codemodder-python@6.5.1...6.5.2

v6.5.1

Compare Source

What's Changed

• Update dependency openai to >=1.95,<1.96 by @​renovate[bot] in #​1082
• Update dependency openai to >=1.97,<1.98 by @​renovate[bot] in #​1083
• Update dependency jsonschema to ~=4.25.0 by @​renovate[bot] in #​1084
• freeze FixResult and child attr classes by @​clavedeluna in #​1085

Full Changelog: pixee/codemodder-python@6.5.0...6.5.1

v6.5.0

Compare Source

What's Changed

• Update dependency types-defusedxml to v0.7.0.20250708 by @​renovate in #​1080
• Report token_usage in FixResult by @​clavedeluna in #​1081

Full Changelog: pixee/codemodder-python@6.4.3...6.5.0

v6.4.3

Compare Source

What's Changed

• Update dependency semgrep to >=1.128,<1.129 by @​renovate in #​1078
• Added v2 to v3 result transformation that includes package changes by @​andrecsilva in #​1079

Full Changelog: pixee/codemodder-python@6.4.2...6.4.3

v6.4.2

Compare Source

What's Changed

• Try pydantic bump by @​nahsra in #​1077

Full Changelog: pixee/codemodder-python@6.4.1...6.4.2

v6.4.1

Compare Source

What's Changed

• Update all non-major dependencies by @​renovate in #​1071
• Update dependency lxml to v6 by @​renovate in #​1074
• Update all non-major dependencies by @​renovate in #​1073
• Update dependency openai to >=1.93,<1.94 by @​renovate in #​1075
• Fix sast_only flag behavior to include other sast input flags by @​andrecsilva in #​1076

Full Changelog: pixee/codemodder-python@6.4.0...6.4.1

v6.4.0

Compare Source

What's Changed

• Fix failing upload sonar results by @​clavedeluna in #​1066
• Update all non-major dependencies by @​renovate in #​1067
• Do not filter Sonar results by status by @​drdavella in #​1072

Full Changelog: pixee/codemodder-python@6.3.1...6.4.0

v6.3.1

Compare Source

What's Changed

• Update dependency pytest-asyncio to v1 by @​renovate in #​1064
• Update all non-major dependencies by @​renovate in #​1065
• Fixed CodeTF v2 result to v3 transformation by @​andrecsilva in #​1068

Full Changelog: pixee/codemodder-python@6.3.0...6.3.1

v6.3.0

Compare Source

What's Changed

• Update dependency openai to >=1.77,<1.78 by @​renovate in #​1058
• Update dependency semgrep to >=1.121,<1.122 by @​renovate in #​1059
• Update dependency openai to >=1.78,<1.79 by @​renovate in #​1060
• Added transform for CodeTFv2 models to CodeTFv3 by @​andrecsilva in #​1061
• Update all non-major dependencies by @​renovate in #​1062
• Remove V2 finding compatibility for FixResult by @​drdavella in #​1063

Full Changelog: pixee/codemodder-python@6.2.2...6.3.0

v6.2.2

Compare Source

What's Changed

• Fixed rule_id being inserted into finding_id field by @​andrecsilva in #​1055
• ensure fixQuality is reported by @​clavedeluna in #​1057

Full Changelog: pixee/codemodder-python@6.2.1...6.2.2

v6.2.1

Compare Source

What's Changed

• Test JSON serialization of CodeTF v3 by @​drdavella in #​1056

Full Changelog: pixee/codemodder-python@6.2.0...6.2.1

v6.2.0

Compare Source

What's Changed

• Add optional values for CodeTFv3 types by @​drdavella in #​1054

Full Changelog: pixee/codemodder-python@6.1.0...6.2.0

v6.1.0

Compare Source

What's Changed

• Findings for results should not be optional by @​drdavella in #​1053

Full Changelog: pixee/codemodder-python@6.0.1...6.1.0

v6.0.1

Compare Source

What's Changed

• Update dependency packaging to v25 by @​renovate in #​1044
• Update all non-major dependencies by @​renovate in #​1047
• Update dependency setuptools to v80 by @​renovate in #​1051
• Fix regression in CodeTF v2 Finding by @​drdavella in #​1052

Full Changelog: pixee/codemodder-python@6.0.0...6.0.1

v6.0.0

Compare Source

What's Changed

• Added Independent Finding Execution Behavior by @​andrecsilva in #​1030
• Allow finding rule name to be overridden by @​drdavella in #​1041
• Update all non-major dependencies by @​renovate in #​1040
• Update all non-major dependencies by @​renovate in #​1042
• Update dependency setuptools to v79 by @​renovate in #​1045
• Filter results by finding ID by @​drdavella in #​1046
• Share common CodeTF models where possible by @​drdavella in #​1049

Full Changelog: pixee/codemodder-python@5.0.1...6.0.0

v5.0.1

Compare Source

Full Changelog: pixee/codemodder-python@4.3.1...5.0.1

Releases #​1043

v5.0.0

Compare Source

⚠️ THIS RELEASE HAS BEEN YANKED

What's Changed

• Added Independent Finding Execution Behavior by @​andrecsilva in #​1030
• Allow finding rule name to be overridden by @​drdavella in #​1041
• Update all non-major dependencies by @​renovate in #​1040
• Update all non-major dependencies by @​renovate in #​1042
• make semgrep and optional and test dependency by @​clavedeluna in #​1043

Full Changelog: pixee/codemodder-python@4.1.0...5.0.0

v4.3.1

Compare Source

Full Changelog: pixee/codemodder-python@4.3.0...4.3.1

v4.3.0

Compare Source

Full Changelog: pixee/codemodder-python@4.2.1...4.3.0

v4.2.1

Full Changelog: pixee/codemodder-python@4.1.0...4.2.1

NOTE: Release 4.2.0 was yanked since it should have been a major release.

v4.1.0

Compare Source

What's Changed

• Update all non-major dependencies by @​renovate in #​1037
• Add generic type bounds for ResultSet by @​drdavella in #​1039

Full Changelog: pixee/codemodder-python@4.0.1...4.1.0

v4.0.1

Compare Source

What's Changed

• Update dependency semgrep to >=1.117,<1.118 by @​renovate in #​1035
• Update dependency openai to >=1.71,<1.72 by @​renovate in #​1036
• Fixed sonar URL generation from rule id by @​andrecsilva in #​1038

Full Changelog: pixee/codemodder-python@4.0.0...4.0.1

v4.0.0

Compare Source

What's Changed

• Update all non-major dependencies by @​renovate in #​1033
• Use sarif-pydantic for SARIF data models by @​drdavella in #​1034
  • Introduces breaking changes to the Result data model

Full Changelog: pixee/codemodder-python@3.23.0...4.0.0

v3.23.0

Compare Source

What's Changed

• Update all non-major dependencies by @​renovate in #​1027
• Update dependency setuptools to v78 by @​renovate in #​1031
• Update all non-major dependencies by @​renovate in #​1029
• SarifResult class should not be abstract by @​drdavella in #​1032

Full Changelog: pixee/codemodder-python@3.22.4...3.23.0

v3.22.4

Compare Source

What's Changed

• Update dependency setuptools to v76 by @​renovate in #​1022
• Update all non-major dependencies by @​renovate in #​1024
• Update dependency libcst to >=1.7,<1.8 by @​renovate in #​1026
• Disable noisy log message by default by @​drdavella in #​1025

Full Changelog: pixee/codemodder-python@3.22.3...3.22.4

v3.22.3

Compare Source

What's Changed

• Use correct type for FixStatus.status by @​drdavella in #​1023

Full Changelog: pixee/codemodder-python@3.22.1...3.22.3

v3.22.1

Compare Source

What's Changed

• update renovate and rm dependabot by @​clavedeluna in #​1019
• Update all non-major dependencies by @​renovate in #​1021

Full Changelog: pixee/codemodder-python@3.22.0...3.22.1

v3.22.0

Compare Source

What's Changed

• Update dependency types-mock to ==5.2.* by @​renovate in #​1018
• Working draft for CodeTFv3 data model by @​drdavella in #​1012

Full Changelog: pixee/codemodder-python@3.21.0...3.22.0

v3.21.0

Compare Source

What's Changed

• Update semgrep requirement from <1.108,>=1.99 to >=1.99,<1.110 by @​dependabot in #​1001
• Update dependency openai to >=1.64,<1.65 by @​renovate in #​1003
• Update dependency semgrep to >=1.110,<1.111 by @​renovate in #​1007
• Update dependency openai to >=1.65,<1.66 by @​renovate in #​1009
• Update dependency mock to ==5.2.* by @​renovate in #​1011
• Add o1 models to registry by @​clavedeluna in #​1013
• Fix pytest warnings by @​clavedeluna in #​1006

Full Changelog: pixee/codemodder-python@3.20.2...3.21.0

v3.20.2

Compare Source

What's Changed

• Update dependency openai to >=1.63,<1.64 by @​renovate in #​993
• Implement simple add for TokenUsage by @​drdavella in #​1002

Full Changelog: pixee/codemodder-python@3.20.1...3.20.2

v3.20.1

Compare Source

What's Changed

• Use int for score in Rating data model by @​drdavella in #​1000

Full Changelog: pixee/codemodder-python@3.20.0...3.20.1

v3.20.0

Compare Source

What's Changed

• Add fixQuality per CodeTF spec update by @​drdavella in #​999

Full Changelog: pixee/codemodder-python@3.19.0...3.20.0

v3.19.0

Compare Source

What's Changed

• Update pre-commit hooks by @​github-actions in #​980
• Update semgrep requirement from <1.107,>=1.99 to >=1.99,<1.108 by @​dependabot in #​989
• Report LLM token usage by @​clavedeluna in #​991

Full Changelog: pixee/codemodder-python@3.18.0...3.19.0

v3.18.0

Compare Source

What's Changed

• Update isort requirement from <5.14,>=5.12 to >=5.12,<6.1 by @​dependabot in #​982
• Update semgrep requirement from <1.105,>=1.99 to >=1.99,<1.107 by @​dependabot in #​983
• Update dependency openai to >=1.61,<1.62 by @​renovate in #​984
• Update boltons requirement from <24.2,>=21.0 to >=21.0,<25.1 by @​dependabot in #​987
• add tokens fields to codetf by @​clavedeluna in #​988

Full Changelog: pixee/codemodder-python@3.17.0...3.18.0

v3.17.0

Compare Source

What's Changed

• Update dependency libcst to >=1.6,<1.7 by @​renovate in #​967
• Update semgrep requirement from <1.100,>=1.99 to >=1.99,<1.104 by @​dependabot in #​968
• New Codemod: Sonar Flask Secure Cookie by @​andrecsilva in #​969
• Update dependency numpy to ~=2.2.1 by @​renovate in #​951
• Update dependency python-json-logger to v3 by @​renovate in #​953
• Update dependency types-wtforms to v3.2.1.20241221 by @​renovate in #​961
• Update openai requirement from <1.58,>=1.57 to >=1.57,<1.60 by @​dependabot in #​972
• Update openai requirement from <1.60,>=1.57 to >=1.57,<1.61 by @​dependabot in #​976
• Update semgrep requirement from <1.104,>=1.99 to >=1.99,<1.105 by @​dependabot in #​977
• Update pre-commit hooks by @​github-actions in #​947
• New Sonar codemode: use-secure-protocols by @​andrecsilva in #​973

Full Changelog: pixee/codemodder-python@3.16.0...3.17.0

What's Changed

• Update dependency libcst to >=1.6,<1.7 by @​renovate in #​967
• Update semgrep requirement from <1.100,>=1.99 to >=1.99,<1.104 by @​dependabot in #​968
• New Codemod: Sonar Flask Secure Cookie by @​andrecsilva in #​969
• Update dependency numpy to ~=2.2.1 by @​renovate in #​951
• Update dependency python-json-logger to v3 by @​renovate in #​953
• Update dependency types-wtforms to v3.2.1.20241221 by @​renovate in #​961
• Update openai requirement from <1.58,>=1.57 to >=1.57,<1.60 by @​dependabot in #​972
• Update openai requirement from <1.60,>=1.57 to >=1.57,<1.61 by @​dependabot in #​976
• Update semgrep requirement from <1.104,>=1.99 to >=1.99,<1.105 by @​dependabot in #​977
• Update pre-commit hooks by @​github-actions in #​947
• New Sonar codemode: use-secure-protocols by @​andrecsilva in #​973
• generalize sarif loc code by @​clavedeluna in #​979

Full Changelog: pixee/codemodder-python@3.16.0...3.17.0

v3.16.0

Compare Source

What's Changed

• Add --sonar-json CLI flag; deprecate existing sonar flags by @​drdavella in #​965
• Use proper finding IDs for sonar and semgrep SARIF by @​drdavella in #​956

Full Changelog: pixee/codemodder-python@3.15.0...3.16.0

v3.15.0

Compare Source

What's Changed

• Added CWE links for several codemods by @​andrecsilva in #​964

Full Changelog: pixee/codemodder-python@3.14.3...3.15.0

v3.14.3

Compare Source

What's Changed

• Fix sonar issues and hotspots parsing by @​drdavella in #​962

Full Changelog: pixee/codemodder-python@3.14.2...3.14.3

v3.14.2

Compare Source

What's Changed

• Fix finding IDs for semgrep sarifs by @​drdavella in #​960

Full Changelog: pixee/codemodder-python@3.14.1...3.14.2

v3.14.1

Compare Source

What's Changed

• Update dependency openai to >=1.57,<1.58 by @​renovate in #​945
• Update dependency semgrep to >=1.99,<1.100 by @​renovate in #​946
• Finding ID is optional according to the spec by @​drdavella in #​959

Full Changelog: pixee/codemodder-python@3.14.0...3.14.1

v3.14.0

Compare Source

What's Changed

• ResultSet or behavior needs update for storing tools by @​clavedeluna in #​944

Full Changelog: pixee/codemodder-python@3.13.0...3.14.0

v3.13.0

Compare Source

What's Changed

• store sarif tool data by @​clavedeluna in #​943
• Update fixed findings metadata to align with CodeTF spec by @​drdavella in #​941
• Code transformers populate fix quality metadata by @​drdavella in #​942

Full Changelog: pixee/codemodder-python@3.12.0...3.13.0

v3.12.0

Compare Source

What's Changed

• Semgrep and codeql finding ids by @​drdavella in #​939

Full Changelog: pixee/codemodder-python@3.11.0...3.12.0

v3.11.0

Compare Source

What's Changed

• Update dependency openai to >=1.56,<1.57 by @​renovate in #​936
• Update pre-commit hooks by @​github-actions in #​934
• CodeQL: use "correlationGuid" for finding ID by @​drdavella in #​937

Full Changelog: pixee/codemodder-python@3.10.0...3.11.0

v3.10.0

Compare Source

What's Changed

• Update dependency pydantic to ~=2.10.1 by @​renovate in #​924
• Update dependency wrapt to ~=1.17.0 by @​renovate in #​928
• Update boltons requirement from ~=21.0.0 to >=21.0,<24.2 by @​dependabot in #​931
• add property to get all registered tool rules by @​clavedeluna in #​933
• Update pre-commit hooks by @​github-actions in #​930

Full Changelog: pixee/codemodder-python@3.9.0...3.10.0

v3.9.0

Compare Source

What's Changed

• Update dependency semgrep to >=1.97,<1.98 by @​renovate in #​921
• Update dependency openai to >=1.55,<1.56 by @​renovate in #​923
• Avoid duplicate findings from multiple sarif files by @​drdavella in #​927

Full Changelog: pixee/codemodder-python@3.8.0...3.9.0

v3.8.0

Compare Source

What's Changed

• Remove restriction on duplicate sarif tools by @​drdavella in #​925

Full Changelog: pixee/codemodder-python@3.7.0...3.8.0

v3.7.0

Compare Source

What's Changed

• Update codecov/codecov-action action to v5 by @​renovate in #​915
• Update dependency pyjwt to ~=2.10.0 by @​renovate in #​918
• Update pre-commit hooks by @​github-actions in #​917
• be able to get codemods by tool from registry by @​clavedeluna in #​920

Full Changelog: pixee/codemodder-python@3.6.0...3.7.0

v3.6.0

Compare Source

What's Changed

• Update dependency openai to >=1.54,<1.55 by @​renovate in #​908
• Fix a confusing log message by @​drdavella in #​910
• Update dependency semgrep to >=1.96,<1.97 by @​renovate in #​911
• Add new CodeTF metadata for "strategy" and "provisional" by @​drdavella in #​914

Full Changelog: pixee/codemodder-python@3.5.0...3.6.0

v3.5.0

Compare Source

What's Changed

• Update pytest-cov requirement from <5.1,>=4.1 to >=4.1,<6.1 by @​dependabot in #​900
• Update dependency openai to >=1.53,<1.54 by @​renovate in #​901
• Update dependency semgrep to >=1.95,<1.96 by @​renovate in #​902
• Enable library callers to disable AI clients by @​drdavella in #​907
• Do not configure logger in codemodder.run by @​drdavella in #​905

Full Changelog: pixee/codemodder-python@3.4.0...3.5.0

v3.4.0

Compare Source

What's Changed

Dependencies

• Update dependency types-wtforms to v3.2.0.20241021 by @​renovate in #​888
• Update dependency types-wtforms to v3.2.1.20241023 by @​renovate in #​889
• Update dependency flask-wtf to v1.2.2 by @​renovate in #​895
• Update dependency types-wtforms to v3.2.1.20241025 by @​renovate in #​896
• Update dependency semgrep to >=1.93,<1.94 by @​renovate in #​892

New

• Add case-insensitive validation for CodeTF enum values by @​drdavella in #​898

Full Changelog: pixee/codemodder-python@3.3.0...3.4.0

v3.3.0

Compare Source

What's Changed

• Update dependency semgrep to >=1.92,<1.93 by @​renovate in #​882
• Update dependency openai to >=1.52,<1.53 by @​renovate in #​883
• Update pre-commit hooks by @​github-actions in #​880
• add match findings method to FileContext by @​clavedeluna in #​885
• Cleanup around sarif processing by @​clavedeluna in #​886

Full Changelog: pixee/codemodder-python@3.2.0...3.3.0

v3.2.0

Compare Source

What's Changed

• Gather results by rules by @​drdavella in #​881

Full Changelog: pixee/codemodder-python@3.1.0...3.2.0

v3.1.0

Compare Source

What's Changed

• Enable running codemodder as a library import by @​clavedeluna in #​879

Full Changelog: pixee/codemodder-python@3.0.1...3.1.0

v3.0.1

Compare Source

What's Changed

• Update dependency semgrep to >=1.91,<1.92 by @​renovate in #​875
• Update libcst requirement from <1.5,>=1.1 to >=1.1,<1.6 by @​dependabot in #​877
• forgot to change top of class typing by @​clavedeluna in #​878

Full Changelog: pixee/codemodder-python@3.0.0...3.0.1

v3.0.0

Compare Source

What's Changed

NOTE: This release implements a breaking change to the OpenAI LLM client.

• Less restrictive version for upload tool results action by @​drdavella in #​870
• Update pre-commit hooks by @​github-actions in #​867
• change test assertion to bypass python argparse bug by @​clavedeluna in #​874
• Add Azure Llama client support by @​clavedeluna in #​872

Full Changelog: pixee/codemodder-python@2.6.1...3.0.0

v2.6.1

Compare Source

What's Changed

• add debug statement when no files match by @​clavedeluna in #​851
• Safely handle Sonar results without textRange by @​drdavella in #​869

Full Changelog: pixee/codemodder-python@2.6.0...2.6.1

v2.6.0

Compare Source

What's Changed

• Update dependency openai to >=1.45,<1.46 by @​renovate in #​832
• Update dependency setuptools to v75 by @​renovate in #​836
• Update pre-commit hooks by @​github-actions in #​835
• Update dependency openai to >=1.46,<1.47 by @​renovate in #​839
• Update dependency semgrep to >=1.87,<1.88 by @​renovate in #​834
• Update dependency semgrep to >=1.88,<1.89 by @​renovate in #​842
• (Sonar) Fixed finding: "Boolean checks should not be inverted" by @​pixeebot in #​841
• Core codemods should ignore site-packages directories by @​drdavella in #​846

Full Changelog: pixee/codemodder-python@2.5.0...2.6.0

v2.5.0

Compare Source

What's Changed

• New Semgrep codemod: sandbox process creation by @​drdavella in #​831

Full Changelog: pixee/codemodder-python@2.4.0...2.5.0

v2.4.0

Compare Source

What's Changed

• Update dependency pydantic to ~=2.9.0 by @​renovate in #​823
• Update dependency openai to >=1.44,<1.45 by @​renovate in #​828
• New codemod: Sonar pythonsecurity:S2076 by @​drdavella in #​830

Full Changelog: pixee/codemodder-python@2.3.0...2.4.0

v2.3.0

Compare Source

What's Changed

New

• New find and fix and sonar codemod for "inverted boolean checks" by @​clavedeluna in #​790
• Timezone find and fix and sonar codemod by @​clavedeluna in #​802

Fixed

• CodeTF: change descriptions are optional but must not be empty by @​drdavella in #​822
• Fix sonar metadata by @​drdavella in #​824

Dependencies

• Update dependency setuptools to v74 by [@​renovate](https://red

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud