Skip to content

Release v0.51.0

Compare
Choose a tag to compare
@github-actions github-actions released this 13 May 19:29

Added

  • Keep track of and report rule parse time in addition to file parse time
  • v0 of opt-in anonymous aggregate metrics

Fixed

  • JS/TS: allow the deep expression operator <... ...> in expression
    statement position, for example:
$ARG = [$V];
...
<... $O[$ARG] ...>; // this works now
  • PHP arrays with dots inside parse
  • Propagate constants in nested lvalues such as y in x[y]
  • C# experimental support

Changed

  • Show log messages from semgrep-core when running semgrep with
    --debug.
  • By default, targets larger than 1 MB are now excluded from semgrep
    scans. New option --max-target-bytes 0 restores the old behavior.
  • Report relative path instead of absolute when using --time