diff --git a/HISTORY.md b/HISTORY.md index c6ebc191..7f455762 100644 --- a/HISTORY.md +++ b/HISTORY.md @@ -1,5 +1,12 @@ # History +## v0.14.0 - 2026-01-16 + +### Maintenance + +* Resolve code scanning failure - Issue [#508](https://github.com/sdv-dev/Copulas/issues/508) by @rwedge +* Support Python 3.14 - Issue [#503](https://github.com/sdv-dev/Copulas/issues/503) by @gsheni + ## v0.13.0 - 2026-01-02 ### Bugs Fixed diff --git a/static_code_analysis.txt b/static_code_analysis.txt index 4db24ad1..2143025e 100644 --- a/static_code_analysis.txt +++ b/static_code_analysis.txt @@ -1,10 +1,10 @@ -Run started:2026-01-02 18:18:51.008857 +Run started:2026-01-16 18:31:46.215530+00:00 Test results: >> Issue: [B403:blacklist] Consider possible security implications associated with pickle module. Severity: Low Confidence: High CWE: CWE-502 (https://cwe.mitre.org/data/definitions/502.html) - More Info: https://bandit.readthedocs.io/en/1.7.7/blacklists/blacklist_imports.html#b403-import-pickle + More Info: https://bandit.readthedocs.io/en/1.9.2/blacklists/blacklist_imports.html#b403-import-pickle Location: ./copulas/multivariate/base.py:3:0 2 3 import pickle @@ -14,7 +14,7 @@ Test results: >> Issue: [B301:blacklist] Pickle and modules that wrap it can be unsafe when used to deserialize untrusted data, possible security issue. Severity: Medium Confidence: High CWE: CWE-502 (https://cwe.mitre.org/data/definitions/502.html) - More Info: https://bandit.readthedocs.io/en/1.7.7/blacklists/blacklist_calls.html#b301-pickle + More Info: https://bandit.readthedocs.io/en/1.9.2/blacklists/blacklist_calls.html#b301-pickle Location: ./copulas/multivariate/base.py:178:19 177 with open(path, 'rb') as pickle_file: 178 return pickle.load(pickle_file) @@ -24,7 +24,7 @@ Test results: >> Issue: [B101:assert_used] Use of assert detected. The enclosed code will be removed when compiling to optimised byte code. Severity: Low Confidence: High CWE: CWE-703 (https://cwe.mitre.org/data/definitions/703.html) - More Info: https://bandit.readthedocs.io/en/1.7.7/plugins/b101_assert_used.html + More Info: https://bandit.readthedocs.io/en/1.9.2/plugins/b101_assert_used.html Location: ./copulas/optimize/__init__.py:26:4 25 """ 26 assert (f(xmin) <= 0.0).all() @@ -34,7 +34,7 @@ Test results: >> Issue: [B101:assert_used] Use of assert detected. The enclosed code will be removed when compiling to optimised byte code. Severity: Low Confidence: High CWE: CWE-703 (https://cwe.mitre.org/data/definitions/703.html) - More Info: https://bandit.readthedocs.io/en/1.7.7/plugins/b101_assert_used.html + More Info: https://bandit.readthedocs.io/en/1.9.2/plugins/b101_assert_used.html Location: ./copulas/optimize/__init__.py:27:4 26 assert (f(xmin) <= 0.0).all() 27 assert (f(xmax) >= 0.0).all() @@ -44,7 +44,7 @@ Test results: >> Issue: [B101:assert_used] Use of assert detected. The enclosed code will be removed when compiling to optimised byte code. Severity: Low Confidence: High CWE: CWE-703 (https://cwe.mitre.org/data/definitions/703.html) - More Info: https://bandit.readthedocs.io/en/1.7.7/plugins/b101_assert_used.html + More Info: https://bandit.readthedocs.io/en/1.9.2/plugins/b101_assert_used.html Location: ./copulas/optimize/__init__.py:71:4 70 shape = np.shape(fa) 71 assert shape == np.shape(fb) @@ -54,7 +54,7 @@ Test results: >> Issue: [B101:assert_used] Use of assert detected. The enclosed code will be removed when compiling to optimised byte code. Severity: Low Confidence: High CWE: CWE-703 (https://cwe.mitre.org/data/definitions/703.html) - More Info: https://bandit.readthedocs.io/en/1.7.7/plugins/b101_assert_used.html + More Info: https://bandit.readthedocs.io/en/1.9.2/plugins/b101_assert_used.html Location: ./copulas/optimize/__init__.py:77:4 76 # Make sure we are bracketing a root in each case 77 assert (np.sign(fa) * np.sign(fb) <= 0).all() @@ -64,7 +64,7 @@ Test results: >> Issue: [B403:blacklist] Consider possible security implications associated with pickle module. Severity: Low Confidence: High CWE: CWE-502 (https://cwe.mitre.org/data/definitions/502.html) - More Info: https://bandit.readthedocs.io/en/1.7.7/blacklists/blacklist_imports.html#b403-import-pickle + More Info: https://bandit.readthedocs.io/en/1.9.2/blacklists/blacklist_imports.html#b403-import-pickle Location: ./copulas/univariate/base.py:3:0 2 3 import pickle @@ -74,7 +74,7 @@ Test results: >> Issue: [B301:blacklist] Pickle and modules that wrap it can be unsafe when used to deserialize untrusted data, possible security issue. Severity: Medium Confidence: High CWE: CWE-502 (https://cwe.mitre.org/data/definitions/502.html) - More Info: https://bandit.readthedocs.io/en/1.7.7/blacklists/blacklist_calls.html#b301-pickle + More Info: https://bandit.readthedocs.io/en/1.9.2/blacklists/blacklist_calls.html#b301-pickle Location: ./copulas/univariate/base.py:488:19 487 with open(path, 'rb') as pickle_file: 488 return pickle.load(pickle_file) @@ -84,7 +84,7 @@ Test results: >> Issue: [B110:try_except_pass] Try, Except, Pass detected. Severity: Low Confidence: High CWE: CWE-703 (https://cwe.mitre.org/data/definitions/703.html) - More Info: https://bandit.readthedocs.io/en/1.7.7/plugins/b110_try_except_pass.html + More Info: https://bandit.readthedocs.io/en/1.9.2/plugins/b110_try_except_pass.html Location: ./copulas/univariate/selection.py:32:8 31 best_model = model 32 except Exception: