Skip to content

v0.14.1 - Dependency Fix & Detector Improvements

Latest

Choose a tag to compare

@jwesleye jwesleye released this 06 Jan 16:58
· 3 commits to main since this release

What's Changed

Breaking Changes

  • Removed basic-open-agent-tools dependency - This package is now fully independent with zero dependencies on basic-open-agent-tools
  • Updated to strands-agents>=1.20.0 - Changed from generic 'strands' to the specific 'strands-agents' package

Bug Fixes

Fixed 21 failing tests in advanced_analysis/test_detectors.py:

  • detect_circular_imports: Fixed severity calculation to consider cycle length and complexity
  • find_unused_dependencies: Added package name mappings (PyYAML→yaml, google-cloud-storage, etc.)
  • scan_for_hardcoded_credentials: Made patterns more flexible (10+ chars instead of 20+)
  • find_xss_vulnerabilities: Fixed pattern names (document.write, dangerouslySetInnerHTML)
  • detect_memory_leak_patterns: Fixed line indexing bugs, added comment filtering, improved global accumulation detection
  • find_blocking_io: Fixed file I/O detection to include with statements, improved XHR detection
  • check_gdpr_compliance: Added more PII keywords, improved audit trail detection
  • validate_accessibility: Improved button text detection using regex, added semantic HTML checking
  • detect_license_violations: Fixed LGPL compatibility by preventing substring matching, added proprietary dependency flagging

Test Results

  • Advanced Analysis Module: 92/92 tests passing (100%), coverage at 91%
  • Full Test Suite: 1980/1981 tests passing (99.95%), overall coverage at 84%

Dependencies Updated

  • tree-sitter-language-pack: 0.9.0 → 0.13.0
  • pytest: 7.0.0 → 9.0.0
  • pytest-cov: 4.0.0 → 7.0.0
  • ruff: 0.1.0 → 0.14.0
  • mypy: 1.0.0 → 1.19.0

Full Changelog: v0.14.0...v0.14.1