Download Latest Version
Release v1.139.0 source code.zip (15.5 MB)
Get an email when there's a new version of Semgrep
| Name | Modified | Size | Downloads / Week |
|---|---|---|---|
| Parent folder | |||
| README.md | 2025-09-25 | 992 Bytes | |
| Release v1.138.0 source code.tar.gz | 2025-09-25 | 11.2 MB | |
| Release v1.138.0 source code.zip | 2025-09-25 | 15.5 MB | |
| Totals: 3 Items | 26.7 MB | 4 | |
1.138.0 - 2025-09-25
Added
- pro: scala: Method dispatching through traits (code-9092)
Changed
- Pro: additionally improved prefiltering for taint rules, especially when using taint labels. This allows for the generation of more specific conditions than the previously released version (v1.133.0). (code-9097)
Fixed
- pro: python: Fix resolution of implicit namespace modules (code-9008)
- We now filter
SEMGREP_APP_TOKENfrom any request made to non semgrep URLs passed to-f/-c/--configduring config/rules fetching. (gh-11016) - Typescript: Made it so that the pattern
var $X = $FUNC($REQ, $RES, ...) {...}no longer fails to parse. (saf-2159) - pro: improved performance of
tsconfig.jsonmatching for Typescript projects that contain multipletsconfig.jsons. (saf-2163) - Semgrep no longer fails to validate a config when a rule lang is capitalized (Introduced 1.137.0) (saf-2247)