semgrep 0.54.0

Release v0.54.0

on Python PyPI

Added

• Per rule parse times and per rule-file parse and match times added to opt-in metrics
• $...MVAR can now match a list of statements (not just a list of arguments) (#3170)

Fixed

• JavaScript parsing: Support decorators on
  properties
• JavaScript parsing: Allow default export for any declaration
• Metavariables in messages are filled in when using --optimizations all
• Python: class variables are matched in any order (#3212)
• Respect --timeout-threshold option in --optimizations all mode

Changed

• Moved some debug logging to verbose logging
• $...ARGS can now match an empty list of arguments, just like ... (#3177)
• JSON and SARIF outputs sort keys for predictable results