Update semgrep requirement from <1.55,>=1.50 to >=1.50,<1.56

[dependabot]

Updates the requirements on semgrep to permit the latest version.

Changelog

Sourced from semgrep's changelog.

1.55.0 - 2024-01-02

Changed

• The rule option commutative_compop has been renamed to symmetric_eq. It is deprecated and will be removed after the 1.60.0 release. (gh-9496)

1.54.3 - 2023-12-22

Added

• Pro only: taint-mode: Added experimental at-exit: true option for sinks, that makes a sink spec only apply on the "exit" instructions/statements of a function. That is, the instructions after which the control-flow exits the function. This is useful for writing rules to find "leaks", such as checking that file descriptors are being closed within the same function where they were opened.

  For example, given this taint rule:

  pattern-sources:
    - by-side-effect: true
      patterns:
        - pattern: $FILE = open(...)
        - focus-metavariable: $FILE
  pattern-sanitizers:
    - by-side-effect: true
      patterns:
        - pattern: $FILE.close(...)
        - focus-metavariable: $FILE
  pattern-sinks:
    - at-exit: true
      pattern: |
        def $FUN(...):
          ...

  Semgrep will report a finding in the code below since at print(content), after which the control flow reaches the exit of the function, the file has not yet been closed:

  def test():
      file = open("test.txt")
      content = file.read()

... (truncated)

Commits

• 64bf74e chore: Bump version to 1.55.0
• 1c95148 Rename the rule option commutative_compop to symmetric_eq (#9497)
• adfe680 Cron - update semgrep-rules (#9527)
• 4746a00 Alcotest_ext improvements (#9528)
• d5b3697 restore dry-run guard for dry-run-homebrew (#9518)
• 2be727c fix: metrics typing issues (#9501)
• 43be549 Merge pull request #9517 from semgrep/release-1.54.3
• 411547a chore: Bump version to 1.54.3
• 9888513 tainting: pro: Add at-exit sinks (#9494)
• 8156a80 Update precommit to use more recent semgrep (#9515)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[sonarqubecloud]

Quality Gate passed

Kudos, no new issues were introduced!

0 New issues
0 Security Hotspots
No data about Coverage
No data about Duplication

See analysis details on SonarCloud

[codecov]

Codecov Report

All modified and coverable lines are covered by tests ✅

Comparison is base (a91eb5a) 96.35% compared to head (6030b7a) 96.35%.

Additional details and impacted files

@@           Coverage Diff           @@
##             main     #201   +/-   ##
=======================================
  Coverage   96.35%   96.35%           
=======================================
  Files          82       82           
  Lines        3837     3837           
=======================================
  Hits         3697     3697           
  Misses        140      140