pypi semgrep 1.69.0
Release v1.69.0

latest releases: 1.96.0, 1.95.0, 1.94.0...
7 months ago

1.69.0 - 2024-04-16

Added

  • Tracing: remove support for SEMGREP_OTEL_ENDPOINT and replace with --trace-endpoint <url>.
    This change is for an internal feature for debugging performance. (saf-885)

Changed

  • Passing --debug to Semgrep will not print much, unless a set of tags is specified
    via LOG_TAGS. You can get all debug logs with LOG_TAGS=everything. We do not
    want --debug's output to be enourmous, as it tends not to be useful and yet cause
    some problems. Note that --debug is mainly intended for Semgrep developers, please
    ask for help if needed. (gh-10044)
    • The environment variables used to select the debug-level log messages
      are now prefixed with SEMGREP_ (or PYTEST_SEMGREP_) to avoid namespace
      pollution and undesired cross-application side effects.
      The supported environment variables are now SEMGREP_LOG_TAGS
      and PYTEST_SEMGREP_LOG_TAGS. (gh-10087)
  • The implicit tag to show all debug-level log messages changes from
    everything to all. All debug-level messages shown by default are
    now tagged and selectable with a default tag. (gh-10089)

Fixed

  • In generic mode (default, spacegrep engine), matching a pattern that
    ends with an ellipsis now favors the longest match rather than the shortest
    match when multiple matches are possible. For example, for a given target
    program a a b, the pattern a ... b will match a b as before but
    the pattern a ... will now match the longer a a b rather than a b. (gh-10039)
  • Fixed the inter-file diff scan issue where the removal of pre-existing findings
    didn't work properly when adding a new file or renaming an existing file. (saf-897)

Don't miss a new semgrep release

NewReleases is sending notifications on new releases.