diff --git a/semgrep.yaml b/semgrep.yaml index 2bca53b67fa..a3628475c9c 100644 --- a/semgrep.yaml +++ b/semgrep.yaml @@ -1,6 +1,6 @@ package: name: semgrep - version: "1.145.0" + version: "1.146.0" epoch: 0 description: "Lightweight static analysis for many languages. Find bug variants with patterns that look like source code." copyright: @@ -55,13 +55,9 @@ pipeline: with: repository: https://github.com/returntocorp/semgrep tag: v${{package.version}} - expected-commit: c93a066ea94157c10207f2946ebd7f5807a11cf2 + expected-commit: 079e05d08b86ec1b07509d2e755c631156d3705b recurse-submodules: true - - uses: patch - with: - patches: GHSA-9h52-p55h-vw2f.patch - - name: Change tree sitter version to 0.25 runs: | # The tree-sitter version in the repo is 0.20.6, but we need to use 0.25.3 diff --git a/semgrep/GHSA-9h52-p55h-vw2f.patch b/semgrep/GHSA-9h52-p55h-vw2f.patch deleted file mode 100644 index 507ebe53342..00000000000 --- a/semgrep/GHSA-9h52-p55h-vw2f.patch +++ /dev/null @@ -1,13 +0,0 @@ -diff --git a/cli/setup.py b/cli/setup.py -index f4a73cc..676dff1 100644 ---- a/cli/setup.py -+++ b/cli/setup.py -@@ -127,7 +127,7 @@ install_requires = [ - "exceptiongroup~=1.2.0", - "glom~=22.1", - "jsonschema~=4.25.1", -- "mcp==1.16.0", -+ "mcp==1.23.0", - "opentelemetry-api~=1.37.0", - "opentelemetry-sdk~=1.37.0", - "opentelemetry-exporter-otlp-proto-http~=1.37.0",