From c7a854a4924aaaeee46316c53f42f5d8ed264885 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Sat, 31 Oct 2026 23:53:07 +0000 Subject: [PATCH] build(deps): bump semgrep in /.github in the semgrep group Bumps the semgrep group in /.github with 1 update: [semgrep](https://github.com/semgrep/semgrep). Updates `semgrep` from 1.181.0 to 1.182.1 - [Release notes](https://github.com/semgrep/semgrep/releases) - [Changelog](https://github.com/semgrep/semgrep/blob/develop/CHANGELOG.md) - [Commits](https://github.com/semgrep/semgrep/commits) --- updated-dependencies: - dependency-name: semgrep dependency-version: 1.182.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: semgrep ... Signed-off-by: dependabot[bot] --- .github/requirements-semgrep.in | 2 +- .github/requirements-semgrep.txt | 3 ++- 2 files changed, 3 insertions(+), 2 deletions(-) diff --git a/.github/requirements-semgrep.in b/.github/requirements-semgrep.in index ba847f3c..7cc7f079 100644 --- a/.github/requirements-semgrep.in +++ b/.github/requirements-semgrep.in @@ -51,4 +51,4 @@ # for Dependabot: certifi 2026.10.23 (new roots, #204) is younger than that and # was put back by hand on 2026-10-26. Then run the plain command above once # more. If it changes nothing, pip accepts the set as it stands. -semgrep==1.181.0 +semgrep==1.182.1 diff --git a/.github/requirements-semgrep.txt b/.github/requirements-semgrep.txt index fa683060..280ae437 100644 --- a/.github/requirements-semgrep.txt +++ b/.github/requirements-semgrep.txt @@ -30,6 +30,7 @@ certifi==2026.10.23 # httpcore # httpx # requests + # semgrep cffi==2.1.1 # via cryptography charset-normalizer==3.5.2 @@ -168,7 +169,7 @@ ruamel-yaml-clib==0.2.15 # via semgrep semantic-version==2.10.0 # via semgrep -semgrep==1.181.0 +semgrep==1.182.1 # via -r requirements-semgrep.in sse-starlette==3.5.0 # via mcp