Skip to content

semgrep/1.146.0 package update #76304

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Merged
OddBloke merged 2 commits into from
Dec 18, 2025
Merged

semgrep/1.146.0 package update #76304

OddBloke merged 2 commits into from
Dec 18, 2025

Conversation

@octo-sts
Copy link
Contributor

@octo-sts octo-sts bot commented Dec 17, 2025

Commit: 079e05d08b86ec1b07509d2e755c631156d3705b

Note: If you need to make manual changes to this PR, apply the skip:staging-update-bot label so the reconciler won't overwrite them.

@octo-sts octo-sts bot added automated pr request-version-update request for a newer version of a package semgrep labels Dec 17, 2025
@octo-sts
Copy link
Contributor Author

octo-sts bot commented Dec 17, 2025 •
edited
Loading

🩹 Build Failed: Patch Application Failed

Hunk #1 FAILED at 127. 1 out of 1 hunk FAILED -- saving rejects to file cli/setup.py.rej

Build Details

Category Details
Build System melange
Failure Point patch step applying GHSA-9h52-p55h-vw2f.patch to cli/setup.py

Root Cause Analysis 🔍

The patch file GHSA-9h52-p55h-vw2f.patch could not be applied to cli/setup.py because the target code has changed and the patch context no longer matches. The patch expected to modify line 127 but the actual code structure at that location differs from what the patch was designed for, likely due to upstream changes in the semgrep codebase between when the patch was created and the current version being built (v1.146.0).

Was this comment helpful? Please use 👍 or 👎 reactions on this comment.

@octo-sts octo-sts bot added the ai/skip-comment Stop AI from commenting on PR label Dec 17, 2025
@OddBloke OddBloke self-assigned this Dec 18, 2025
staging-update-bot and others added 2 commits December 18, 2025 10:07
@OddBloke OddBloke force-pushed the staging-update-bot/semgrep.yaml branch from 261c284 to 76f1ed8 Compare December 18, 2025 15:08
@octo-sts octo-sts bot added bincapz/pass bincapz/pass Bincapz (aka. malcontent) scan didn't detect any CRITICALs on the scanned packages. manual/review-needed approver-bot/manual-review-needed staging-approver-bot/manual-review-needed labels Dec 18, 2025
@OddBloke OddBloke requested a review from a team December 18, 2025 15:44
@OddBloke OddBloke enabled auto-merge December 18, 2025 15:44
aborrero
aborrero approved these changes Dec 18, 2025
View reviewed changes
Copy link
Member

@aborrero aborrero left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM.

@OddBloke OddBloke merged commit 08eceae into main Dec 18, 2025
24 checks passed
@OddBloke OddBloke deleted the staging-update-bot/semgrep.yaml branch December 18, 2025 16:09
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@aborrero aborrero aborrero approved these changes

Assignees

@OddBloke OddBloke

Labels

ai/skip-comment Stop AI from commenting on PR approver-bot/manual-review-needed automated pr bincapz/pass bincapz/pass Bincapz (aka. malcontent) scan didn't detect any CRITICALs on the scanned packages. manual/review-needed request-version-update request for a newer version of a package semgrep staging-approver-bot/manual-review-needed

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

3 participants

@aborrero @OddBloke