From 5292469d4e18e4dbf1b21cb5d9483f4bc2184617 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Sat, 24 Oct 2026 23:53:07 +0000 Subject: [PATCH] build(deps): bump semgrep in /.github in the semgrep group Bumps the semgrep group in /.github with 1 update: [semgrep](https://github.com/semgrep/semgrep). Updates `semgrep` from 1.180.0 to 1.181.0 - [Release notes](https://github.com/semgrep/semgrep/releases) - [Changelog](https://github.com/semgrep/semgrep/blob/develop/CHANGELOG.md) - [Commits](https://github.com/semgrep/semgrep/compare/v1.180.0...v1.181.0) --- updated-dependencies: - dependency-name: semgrep dependency-version: 1.181.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: semgrep ... Signed-off-by: dependabot[bot] --- .github/requirements-semgrep.in | 4 ++-- .github/requirements-semgrep.txt | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/.github/requirements-semgrep.in b/.github/requirements-semgrep.in index 39ca490d..9d1350b2 100644 --- a/.github/requirements-semgrep.in +++ b/.github/requirements-semgrep.in @@ -27,7 +27,7 @@ # every package that line installs, pinned, and it is compiled from this file # by pip-compile rather than written by hand. With the one line alone the # vulnerability scanner has to guess what pip would pick, and it guessed wrong: -# measured 2026-10-14, a scan of "semgrep==1.180.0" reported eleven advisories +# measured 2026-10-14, a scan of "semgrep==1.181.0" reported eleven advisories # against versions pip on Python 3.14 never installs. # # Compiled rather than frozen since 2026-10-15. The list was `pip freeze` of a @@ -43,4 +43,4 @@ # job uses and the pip-tools Dependabot runs: # # docker run --rm -v "$PWD/.github:/w" -w /w python:3.14-slim sh -c "pip install -q pip==26.1.1 pip-tools==7.5.3 && pip-compile --strip-extras --no-emit-index-url --output-file=requirements-semgrep.txt requirements-semgrep.in" -semgrep==1.180.0 +semgrep==1.181.0 diff --git a/.github/requirements-semgrep.txt b/.github/requirements-semgrep.txt index 9bdf43ae..7745fbe4 100644 --- a/.github/requirements-semgrep.txt +++ b/.github/requirements-semgrep.txt @@ -168,7 +168,7 @@ ruamel-yaml-clib==0.2.15 # via semgrep semantic-version==2.10.0 # via semgrep -semgrep==1.180.0 +semgrep==1.181.0 # via -r requirements-semgrep.in sse-starlette==3.5.0 # via mcp