semgrep 0.83.0 on Python PyPI

semgrep saves logs of last run to ~/.semgrep/last.log
A new recursive operator, -->, for join mode rules for recursively
chaining together Semgrep rules based on metavariable contents.
Semgrep now lists the scanned paths in its JSON output under the
paths.scanned key.
When using --verbose, the skipped paths are also listed under the
paths.skipped key.
C#: added support for typed metavariables (#4657)
Undocumented, experimental metavariable-analysis feature
supporting two kinds of analyses: prediction of regular expression
denial-of-service vulnerabilities (ReDoS, redos analyzer, #4700)
and high-entropy string detection (entropy analyzer, #4672).
A new subcommand semgrep publish allows users to upload private,
unlisted, or public rules to the Semgrep Registry

Configure the PCRE engine with lower match-attempts and recursion limits in order
to prevent regex matching from potentially "hanging" Semgrep
Terraform: Parse heredocs respecting newlines and whitespaces, so that it is
possible to correctly match these strings with metavariable-regex or
metavariable-pattern. Previously, Semgrep had problems analyzing e.g. embedded
YAML content. (#4582)
Treat Go raw string literals like ordinary string literals (#3938)
Eliminate zombie uname processes (#4466)
Fix for: semgrep always highlights one extra character

Improved constant propagation for global constants
PHP: Constant propagation now has built-in knowledge of escapeshellarg and
htmlspecialchars_decode, if these functions are given constant arguments,
then Semgrep assumes that their output is also constant
The environment variable used by Semgrep login changed from SEMGREP_LOGIN_TOKEN to SEMGREP_APP_TOKEN

semgrep 0.83.0 Release v0.83.0 on Python PyPI