semgrep/1.117.0 package update

[octo-sts]

[octo-sts]

⚠️ EXPERIMENTAL

Please use 👍 or 👎 on this comment to indicate if you agree or disagree with the recommendation.

To provide more detailed feedback please comment on the recommendation prefixed with /ai-verify:

e.g. /ai-verify partially helpful but I also added bash to the build environment

Gen AI suggestions to solve the build error:

• Detected Error:

[ERROR] Package conflict!
  * No agreement on the version of ocaml:
    - (invariant) -> ocaml-base-compiler = 5.2.1 -> ocaml = 5.2.1
    - semgrep -> ocaml >= 5.3.0

• Error Category: Version/Dependency

• Failure Point: OCaml version mismatch during make setup step

• Root Cause Analysis:
The package requires OCaml 5.3.0+ but the melange yaml specifies OCaml 5.2.1 in the vars section. This version mismatch is causing the build to fail.

• Suggested Fix:
Update the OCaml version in the melange yaml:

vars:
  ocaml_version: 5.3.0

• Explanation:
The changelog mentions upgrading Semgrep from OCaml 5.2.1 to 5.3.0 in the "Changed" section. The melange yaml needs to be updated to match this requirement. The error clearly shows that semgrep now requires OCaml >= 5.3.0 while we're trying to build with 5.2.1.

• Additional Notes:

• The package has explicitly bumped its OCaml requirement as noted in the changelog
• This is a straightforward version requirement update
• No other changes should be needed since the build system handles OCaml version management

• References:

• Changelog entry: "Upgrade Semgrep from OCaml 5.2.1 to 5.3.0 (Add the busybox package. #3)"
• https://github.com/semgrep/semgrep/releases/tag/v1.117.0