Bump semgrep from 1.80.0 to 1.83.0

[dependabot]

Bumps semgrep from 1.80.0 to 1.83.0.

Release notes

Sourced from semgrep's releases.

Release v1.83.0

1.83.0 - 2024-08-02

Added

• Dockerfile: Allow Semgrep Ellipsis (...) in patterns for HEALTHCHECK commands. (saf-1441)

Fixed

• The use of --debug should generate now far less log entries. Moreover, when the number of ignored files, or rules, or other entities exceed a big number, we instead replace them with a in the output to keep the output of semgrep small. (debuglogs)
• Fixed a bug introduced in 1.81.0 which caused files ignored for the Code product but not the Secrets product to fail to be scanned for secrets. Files that were not ignored for either product were not affected. (saf-1459)

Release v1.82.0

1.82.0 - 2024-07-30

Added

• Added testsuite/ as a filepath to the default value for .semgrepignore. (gh-1876)

Changed

• Update the library definitions for Java for the latest version of the JDK. (java-library-definitions)

Fixed

• Fixed metavariable comparison in step mode.

  Used to be that the rule:

      steps:
          - languages: [python]
            patterns:
              - pattern: x = f($VAR);
          - languages: [generic]

... (truncated)

Changelog

Sourced from semgrep's changelog.

1.83.0 - 2024-08-02

Added

• Dockerfile: Allow Semgrep Ellipsis (...) in patterns for HEALTHCHECK commands. (saf-1441)

Fixed

• The use of --debug should generate now far less log entries. Moreover, when the number of ignored files, or rules, or other entities exceed a big number, we instead replace them with a in the output to keep the output of semgrep small. (debuglogs)
• Fixed a bug introduced in 1.81.0 which caused files ignored for the Code product but not the Secrets product to fail to be scanned for secrets. Files that were not ignored for either product were not affected. (saf-1459)

1.82.0 - 2024-07-30

Added

• Added testsuite/ as a filepath to the default value for .semgrepignore. (gh-1876)

Changed

• Update the library definitions for Java for the latest version of the JDK. (java-library-definitions)

Fixed

• Fixed metavariable comparison in step mode.

  Used to be that the rule:

      steps:
          - languages: [python]
            patterns:
              - pattern: x = f($VAR);
          - languages: [generic]
            patterns:

... (truncated)

Commits

• 2f066e3 chore: Bump version to 1.83.0
• ca1d891 Switch to Ocaml LSP style monad for LS to fix test timeouts (semgrep/semgrep-...
• 39e083f fix(secrets): run secrets on files in the Code .semgrepignore but not Secrets...
• 66572a7 Add scan id, deployment id, and deployment name to start_scan span in CLI (se...
• 3bd2515semgrep/semgrep-proprietary#1952
• 257b978 fix(osemgrep): fix osemgrep default to match pysemgrep default. (semgrep/semg...
• 3da3b80 Fix 'no such file or directory' for Flask lifecycle harness (semgrep/semgrep-...
• cd8a96bsemgrep/semgrep-proprietary#1956
• 980c596 chore: Update pro readme getting started instructions (semgrep/semgrep-propri...
• 378fca0 feat(docker): Allow ... in HEALTHCHECK patterns (semgrep/semgrep-proprietary#...
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Superseded by #73.