Skip to content

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented May 7, 2025

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
semgrep >=1.120,<1.121 -> >=1.121,<1.122 age adoption passing confidence

Release Notes

returntocorp/semgrep (semgrep)

v1.121.0

Added
  • pro: Improved handling of tsconfig.json in instances where multiple
    typescript "projects" (i.e., separately rooted source directories with their
    own configurations not joined by a single tsconfig.json with project
    references) are being scanned as one project under semgrep. This should result
    in better name/module resolution in TypeScript. (code-7798)
  • pro: Improved handling of include, exclude and files properties in
    tsconfig.json. Projects which use more than one tsconfig in a given directory
    which apply to different sets of files under that directory should see
    improvements in name/module resolution. (code-7798-a)
  • Improved Supply Chain scan output and logging. (sc-2356)
Changed
  • Upgrade the Julia parser to the tree-sitter-julia 0.22.0 (gh-10820)
Fixed
  • Fix bug introduced in Semgrep 1.120.0 causing interfile analyses to run out of memory due to too many parallel jobs. The default setting had been accidentally set to the number of available CPUs which is often too much in interfile mode. It's now back to -j1 and it can be overridden by the user. (interfile-num-jobs)
  • Fixed CI output so it shows per-product links depending on what product is enabled in a scan. (pr-3776)
  • CLI: Fixed a bug where --disable-nosem was not properly causing nosemgrep'd findings
    to be uploaded to the App. (saf-1982)
  • Exempt large manifests & lockfiles from being ignored by semgrep's file size filtering.
    This fixes a regression introduced in 1.117.0 (sca-1705). (sc-1705)

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@sonarqubecloud
Copy link

sonarqubecloud bot commented May 7, 2025

@clavedeluna clavedeluna added this pull request to the merge queue May 7, 2025
Merged via the queue into main with commit ba1bb73 May 7, 2025
14 checks passed
@clavedeluna clavedeluna deleted the renovate/all-minor-patch branch May 7, 2025 11:54
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant