1.69.0 - 2024-04-16
Added
- Tracing: remove support for SEMGREP_OTEL_ENDPOINT and replace with
--trace-endpoint <url>
.
This change is for an internal feature for debugging performance. (saf-885)
Changed
- Passing --debug to Semgrep will not print much, unless a set of tags is specified
viaLOG_TAGS
. You can get all debug logs withLOG_TAGS=everything
. We do not
want --debug's output to be enourmous, as it tends not to be useful and yet cause
some problems. Note that --debug is mainly intended for Semgrep developers, please
ask for help if needed. (gh-10044) -
- The environment variables used to select the debug-level log messages
are now prefixed withSEMGREP_
(orPYTEST_SEMGREP_
) to avoid namespace
pollution and undesired cross-application side effects.
The supported environment variables are nowSEMGREP_LOG_TAGS
andPYTEST_SEMGREP_LOG_TAGS
. (gh-10087)
- The environment variables used to select the debug-level log messages
- The implicit tag to show all debug-level log messages changes from
everything
toall
. All debug-level messages shown by default are
now tagged and selectable with adefault
tag. (gh-10089)
Fixed
- In generic mode (default, spacegrep engine), matching a pattern that
ends with an ellipsis now favors the longest match rather than the shortest
match when multiple matches are possible. For example, for a given target
programa a b
, the patterna ... b
will matcha b
as before but
the patterna ...
will now match the longera a b
rather thana b
. (gh-10039) - Fixed the inter-file diff scan issue where the removal of pre-existing findings
didn't work properly when adding a new file or renaming an existing file. (saf-897)