semgrep 0.111.1

Release v0.111.1

on Python PyPI

0.111.1 - 2022-08-23

Changed

• Previously, the following error message appears when metrics are not uploaded within the set timeout timeframe:

  Error in send: HTTPSConnectionPool(host='metrics.semgrep.dev', port=443): Read timed out. (read timeout=3)

  As this causes users confusion when running the CLI, the log level of the message is reduced to appear for development and debugging purposes only. Note that metrics are still successfully uploaded, but the success status is not sent in time for the curent timeout set. (app-1398)

Fixed

• taint-mode: Fixed the translation from Generic to IL for expressions like
  "some string".concat(x). Previously, when x was tainted, the concat
  expression was not recognized as tainted and this caused false negatives. (pa-1787)