gitlab gitlab-org/security-products/analyzers/semgrep v6.27.0

3 hours ago
  • Update tracking-calculator to v2.14.0 (tracking-calculator!113), which excludes Java line_comment and block_comment nodes from scope_offset_compressed, so inserting a comment above a Java finding no longer changes its identity (!747)
  • Java findings in methods with a class return type, in constructors and in enum, interface, record and annotation members get new signatures once: tracking-calculator v2.14.0 labels Java methods by name instead of by return type and scopes those members, so such findings appear as new and their previous entries as no longer detected on the first scan after the upgrade (!747)

Don't miss a new semgrep release

NewReleases is sending notifications on new releases.