Update all non-major dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
openai	>=1.99,<1.100 -> >=1.102,<1.103
semgrep	>=1.131,<1.132 -> >=1.134,<1.135
types-defusedxml (changelog)	==0.7.0.20250809 -> ==0.7.0.20250822

---

Release Notes

openai/openai-python (openai)

v1.102.0

Compare Source

Full Changelog: v1.101.0...v1.102.0

Features

• api: add web search filters (1c199a8)

Bug Fixes

• avoid newer type syntax (bd0c668)

Chores

• internal: change ci workflow machines (3e129d5)
• internal: codegen related update (b6dc170)

v1.101.0

Compare Source

Full Changelog: v1.101.0...v1.102.0

Features

• api: add web search filters (1c199a8)

Bug Fixes

• avoid newer type syntax (bd0c668)

Chores

• internal: change ci workflow machines (3e129d5)
• internal: codegen related update (b6dc170)

v1.100.2

Compare Source

Full Changelog: v1.100.2...v1.100.3

Chores

• internal/ci: setup breaking change detection (ca2f936)

v1.100.1

Compare Source

Full Changelog: v1.100.1...v1.100.2

Chores

• api: accurately represent shape for verbosity on Chat Completions (c39d5fd)

v1.100.0

Compare Source

Full Changelog: v1.100.0...v1.100.1

Bug Fixes

• types: revert response text config deletion (ac4fb19)

returntocorp/semgrep (semgrep)

v1.134.0

Compare Source

Added

• pro: First version of inter-file (whole-program) analysis for Scala. (code-9029)

v1.133.0

Added

• Pro: improved prefiltering for interfile rules. This allows the engine to skip
  interfile rules earlier in the process when we determine they cannot match in a
  given scan, which should improve performance. (code-8524)
• Semgrep will now display emotional support ascii art and a backtrace, with function names and sometimes files/line #s, when it segfaults, or receives other similar critical signals (pretty-segv)

Fixed

• Pro: Fixed a bug that prevented taint tracking through new in some cases. (code-9047)
• We now substitute metavariables for their values in a deterministic order to
  ensure keys for match-based IDs are stable. (gh-4459)
• Fixed incorrect YAML parsing of strings like nan as well as some more
  obscure cases that were interpreted as a float instead of a string. This
  might affect any area of Semgrep that deals with YAML files containing
  the string nan. (yaml-float-parsing)

v1.132.1

No significant changes.

v1.132.0

Compare Source

Added

• PHP: When enabling option taint_assume_safe_booleans the return values of
  boolval, is_bool, and || will be considered safe.
  When enabling taint_assume_safe_numbers the return values of intval,
  floatval, +, -, *, / and % will also be considered safe. (php)
• When performing secrets validation, the amount of time that the HTTP request
  took to complete will now be visible in the debug logs. (#​2130)
• Introduces a timeout to internal HTTP requests, to prevent remote endpoints
  from indefinitely hanging the engine. (#​4295)

Changed

• Pro scans will no longer attempt to parse tsconfig files for non-typescript scans. (gh-4407)

Fixed

• Language server: Made it so that errors which occur no longer pop up in while using the
  IDE. They still log, but will no longer be displayed via UX. (saf-2193)
• When validating the results of a secrets scan, do not have more than 256
  outstanding validators executing at a given time. (#​2130)

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud