semgrep/semgrep v0.88.0

Release v0.88.0

on GitHub

Added

• Scala support is now officially GA
  • Ellipsis method chaining is now supported
  • Type metavariables are now supported
• Ruby: Add basic support for lambdas in patterns. You can now write patterns
  of the form -> (P) {Q} where P and Q are sub-patterns. (#4950)
• Experimental semgrep install-deep-semgrep command for DeepSemgrep beta (#4993)

Changed

• Moved description of parse/internal errors to the "skipped" section of output
• Since 0.77.0 semgrep-core logs a warning when a worker process is consuming above
  400 MiB of memory. Now, it will also log an extra warning every time memory usage
  doubles. Again, this is meant to help diagnosing OOM-related crashes.

Fixed

• Dockerfile: lang.json file not found error while building the docker image
• Dockerfile: EXPOSE 12345 will now parse 12345 as an int instead of a string,
  allowing metavariable-comparison with integers (#4875)
• Scala: unicode character literals now parse
• Scala: multiple annotated type parameters now parse (def f[@an A, @an B](x : A, y : B) = ...)
• Ruby: Allow 'unless' used as keyword argument or hash key (#4948)
• Ruby: Fix regexp matching in the presence of escape characters (#4999)
• r2c-internal-project-depends-on:
  • Generic mode rules work again
  • Semgrep will not fail on targets that contain no relevant lockfiles
• Go: parse multiline string literals
• Handle utf-8 decoding errors without crashing (#5023)