semgrep/semgrep v0.36.0

Release v0.36.0

on GitHub

0.36.0 - 2021-01-05

Added

• Typed metavariables can now match field access when we can propagate
  the type of a field
• Constant propagation for Java final fields (using this.field syntax)

Changed

• Packaging and setup.py functionality (.whl and pip install unchanged):
  SEMGREP_SKIP_BIN, SEMGREP_CORE_BIN, and SPACEGREP_BIN now available

Fixed

• correctly match the same metavariable for a field when used at a definition
  site and use site for Java
• add classname attribute to junit.xml report