semgrep 0.53.0

Release v0.53.0

on Python PyPI

Added

• Scala alpha support
• Metrics collection of project_hash in cases where git is not available
• Taint mode now also analyzes top-level statements.

Fixed

• Running with --strict will now return results if there are nosem mismatches. Semgrep will report a nonzero exit code if --strict is set and there are nosem mismathces. #3099
• PHP: parsing correctly ... and metavariables in parameters
• PHP: parsing correctly functions with a single statement in their body
• Evaluate interpolated strings during constant propagation (#3127)
• Fixed #3084 - Semgrep will report an InvalidRuleSchemaError for dictionaries with duplicate key names.
• Basic type inference also for implicit variable declarations (Python, Ruby, PHP, and JS)
• JS/TS: differentiating tagged template literals in the AST (#3187)
• Ruby: storing parenthesis in function calls in the AST (#3178)