From bedf4aa6ba2496168bbdaffc0f298604e1127634 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Sat, 14 Nov 2026 23:53:17 +0000 Subject: [PATCH] build(deps): bump semgrep in /.github in the semgrep group Bumps the semgrep group in /.github with 1 update: [semgrep](https://github.com/semgrep/semgrep). Updates `semgrep` from 1.183.0 to 1.184.0 - [Release notes](https://github.com/semgrep/semgrep/releases) - [Changelog](https://github.com/semgrep/semgrep/blob/v1.184.0/CHANGELOG.md) - [Commits](https://github.com/semgrep/semgrep/compare/v1.183.0...v1.184.0) --- updated-dependencies: - dependency-name: semgrep dependency-version: 1.184.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: semgrep ... Signed-off-by: dependabot[bot] --- .github/requirements-semgrep.in | 2 +- .github/requirements-semgrep.txt | 4 +++- 2 files changed, 4 insertions(+), 2 deletions(-) diff --git a/.github/requirements-semgrep.in b/.github/requirements-semgrep.in index 100efa6a..f71b7273 100644 --- a/.github/requirements-semgrep.in +++ b/.github/requirements-semgrep.in @@ -51,4 +51,4 @@ # for Dependabot: certifi 2026.10.23 (new roots, #204) is younger than that and # was put back by hand on 2026-10-26. Then run the plain command above once # more. If it changes nothing, pip accepts the set as it stands. -semgrep==1.183.0 +semgrep==1.184.0 diff --git a/.github/requirements-semgrep.txt b/.github/requirements-semgrep.txt index 51e5a3f2..e4b2140c 100644 --- a/.github/requirements-semgrep.txt +++ b/.github/requirements-semgrep.txt @@ -169,7 +169,7 @@ ruamel-yaml-clib==0.2.15 # via semgrep semantic-version==2.10.0 # via semgrep -semgrep==1.183.0 +semgrep==1.184.0 # via -r requirements-semgrep.in sse-starlette==3.5.0 # via mcp @@ -177,6 +177,8 @@ starlette==1.9.0 # via # mcp # sse-starlette +structlog==26.1.0 + # via semgrep tomli==2.4.1 # via semgrep typing-extensions==4.16.0