chore(deps): bump semgrep from 1.80.0 to 1.81.0

[dependabot]

Bumps semgrep from 1.80.0 to 1.81.0.

Release notes

Sourced from semgrep's releases.

Release v1.81.0

1.81.0 - 2024-07-24

Changed

• The --debug option will now display logging information from the semgrep-core binary directly, without waiting that the semgrep-core program finish. (incremental_debug)

Fixed

• C++: Scanning a project with header files (.h) now no longer causes a spurious warnings that the file is being skipped, or not analyzed. (code-6899)

• Semgrep will now be more strict (as it should be) when unifying identifiers.

  Patterns like the one below may not longer work, particularly in Semgrep Pro:

  patterns:
    - pattern-inside: |
        class A:
          ...
          def $F(...):
            ...
          ...
        ...
    - pattern-inside: |
        class B:
          ...
          def $F(...):
            ...
          ...
        ...
  

  Even if two classes A and B may both have a method named foo, these methods are not the same, and their ids are not unifiable via $F. The right way of doing this in Semgrep is the following:

  patterns:
    - pattern-inside: |
        class A:
          ...
          def $F1(...):
            ...
          ...
        ...
    - pattern-inside: |
        class B:
  

... (truncated)

Changelog

Sourced from semgrep's changelog.

1.81.0 - 2024-07-24

Changed

• The --debug option will now display logging information from the semgrep-core binary directly, without waiting that the semgrep-core program finish. (incremental_debug)

Fixed

• C++: Scanning a project with header files (.h) now no longer causes a spurious warnings that the file is being skipped, or not analyzed. (code-6899)

• Semgrep will now be more strict (as it should be) when unifying identifiers.

  Patterns like the one below may not longer work, particularly in Semgrep Pro:

  patterns:
    - pattern-inside: |
        class A:
          ...
          def $F(...):
            ...
          ...
        ...
    - pattern-inside: |
        class B:
          ...
          def $F(...):
            ...
          ...
        ...
  

  Even if two classes A and B may both have a method named foo, these methods are not the same, and their ids are not unifiable via $F. The right way of doing this in Semgrep is the following:

  patterns:
    - pattern-inside: |
        class A:
          ...
          def $F1(...):
            ...
          ...
        ...
    - pattern-inside: |
        class B:
          ...
  

... (truncated)

Commits

• eaed769 chore: Bump version to 1.81.0
• 17bf770semgrep/semgrep-proprietary#1910
• 8713888semgrep/semgrep-proprietary#1904
• c5db5b4semgrep/semgrep-proprietary#1618
• 269ee41 dogfood: run p/defaults-v2 scan and ci --subdir (semgrep/semgrep-proprietary#...
• cf13010 Remove cli_utils/, introduce networking/Testutil_login (semgrep/semgrep-propr...
• 6326459 fix(tests): log out before running tests in Test_LS_e2e (semgrep/semgrep-pr...
• 10ec55c fix --junit-xml-outputsemgrep/semgrep-proprietary#1899
• c900388semgrep/semgrep-proprietary#1895
• 05dbcebsemgrep/semgrep-proprietary#1889
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)