semgrep 0.69.0

Release v0.69.0

on Python PyPI

Added

• C: support ... in parameters and sizeof arguments (#4037)
• C: support declaration and function patterns
• Java: support @interface pattern (#4030)

Fixed

• Reverted change to exclude minified files from the scan (see changelog for
  0.66.0)
• Java: Fixed equality of metavariables bounded to imported classes (#3748)
• Python: fix range of tuples (#3832)
• C: fix some wrong typedef inference (#4054)
• Ruby: put back equivalence on old syntax for keyword arguments (#3981)
• OCaml: add body of functor in AST (#3821)

Changed

• taint-mode: Introduce a new kind of not conflicting sanitizer that must be
  declared with not_conflicting: true. This affects the change made in 0.68.0
  that allowed a sanitizer like - pattern: $F(...) to work, but turned out to
  affect our ability to specify sanitization by side-effect. Now the default
  semantics of sanitizers is reverted back to the same as before 0.68.0, and
  - pattern: $F(...) is supported via the new not-conflicting sanitizers.