Bump semgrep from 1.48.0 to 1.59.1 in /export

[dependabot]

Bumps semgrep from 1.48.0 to 1.59.1.

Release notes

Sourced from semgrep's releases.

Release v1.59.1

1.59.1 - 2024-02-02

Added

• taint-mode: Pro: Semgrep can now track taint via static class fields and global variables, such as in the following example:

  static char* x;
  void foo() {
  x = "tainted";
  }
  void bar() {
  sink(x);
  }
  void main() {
  foo();
  bar();
  }
  
  </code></pre>
  </li>
  </ul>
  <h3>Fixed</h3>
  <ul>
  <li>Pro: Make inter-file analysis more tolerant to small bugs, resorting to graceful
  degradation and continuing with the scan, rather than crashing. (pa-3387)</li>
  </ul>
  <h2>Release v1.59.0</h2>
  <h2><a href="https://github.com/returntocorp/semgrep/releases/tag/v1.59.0&quot;&gt;1.59.0&lt;/a> - 2024-01-30</h2>
  <h3>Added</h3>
  <ul>
  <li>Swift: Now supports typed metavariables, such as <code>($X : ty)</code>. (pa-3370)</li>
  </ul>
  <h3>Changed</h3>
  <ul>
  <li>Add Elixir to Pro languages list in help information. (<a href="https://redirect.github.com/returntocorp/semgrep/issues/9609&quot;&gt;gh-9609&lt;/a&gt;)&lt;/li>
  <li>Removed <code>sg</code> alias to avoid naming conflicts
  with the shadow-utils <code>sg</code> command for Linux systems. (<a href="https://redirect.github.com/returntocorp/semgrep/issues/9642&quot;&gt;gh-9642&lt;/a&gt;)&lt;/li>
  </ul>
  <!-- raw HTML omitted -->
  </blockquote>
  <p>... (truncated)</p>
  </details>
  <details>
  <summary>Changelog</summary>
  <p><em>Sourced from <a href="https://github.com/semgrep/semgrep/blob/develop/CHANGELOG.md&quot;&gt;semgrep's changelog</a>.</em></p>
  <blockquote>
  <h2><a href="https://github.com/returntocorp/semgrep/releases/tag/v1.59.1&quot;&gt;1.59.1&lt;/a> - 2024-02-02</h2>
  <h3>Added</h3>
  <ul>
  <li>
  <p>taint-mode: Pro: Semgrep can now track taint via static class fields and global
  variables, such as in the following example:</p>
  <pre lang="c"><code>static char* x;
  void foo() {
  x = &quot;tainted&quot;;
  }
  void bar() {
  sink(x);
  }
  void main() {
  foo();
  bar();
  }
  
  
  &lt;/code&gt;&lt;/pre&gt;
  &lt;/li&gt;
  &lt;/ul&gt;
  &lt;h3&gt;Fixed&lt;/h3&gt;
  &lt;ul&gt;
  &lt;li&gt;Pro: Make inter-file analysis more tolerant to small bugs, resorting to graceful
  degradation and continuing with the scan, rather than crashing. (pa-3387)&lt;/li&gt;
  &lt;/ul&gt;
  &lt;h2&gt;&lt;a href=&quot;https://github.com/returntocorp/semgrep/releases/tag/v1.59.0&quot;&gt;1.59.0&lt;/a&gt; - 2024-01-30&lt;/h2&gt;
  &lt;h3&gt;Added&lt;/h3&gt;
  &lt;ul&gt;
  &lt;li&gt;Swift: Now supports typed metavariables, such as &lt;code&gt;($X : ty)&lt;/code&gt;. (pa-3370)&lt;/li&gt;
  &lt;/ul&gt;
  &lt;h3&gt;Changed&lt;/h3&gt;
  &lt;ul&gt;
  &lt;li&gt;Add Elixir to Pro languages list in help information. (&lt;a href=&quot;https://redirect.github.com/returntocorp/semgrep/issues/9609&quot;&gt;gh-9609&lt;/a&gt;)&lt;/li&gt;
  &lt;li&gt;Removed &lt;code&gt;sg&lt;/code&gt; alias to avoid naming conflicts
  with the shadow-utils &lt;code&gt;sg&lt;/code&gt; command for Linux systems. (&lt;a href=&quot;https://redirect.github.com/returntocorp/semgrep/issues/9642&quot;&gt;gh-9642&lt;/a&gt;)&lt;/li&gt;
  &lt;li&gt;Prevent unnecessary computation when running scans without verbose logging enabled (&lt;a href=&quot;https://redirect.github.com/returntocorp/semgrep/issues/9661&quot;&gt;gh-9661&lt;/a&gt;)&lt;/li&gt;
  &lt;/ul&gt;
  &lt;!-- raw HTML omitted --&gt;
  &lt;/blockquote&gt;
  &lt;p&gt;... (truncated)&lt;/p&gt;
  &lt;/details&gt;
  &lt;details&gt;
  &lt;summary&gt;Commits&lt;/summary&gt;
  
  &lt;ul&gt;
  &lt;li&gt;&lt;a href=&quot;https://github.com/semgrep/semgrep/commit/16f6e92bb512558496b05c1b695e482245876fc0&quot;&gt;&lt;code&gt;16f6e92&lt;/code&gt;&lt;/a&gt; chore: Bump version to 1.59.1&lt;/li&gt;
  &lt;li&gt;&lt;a href=&quot;https://github.com/semgrep/semgrep/commit/388c931fd132dd90dba81dc3ac6ed597dd6a731a&quot;&gt;&lt;code&gt;388c931&lt;/code&gt;&lt;/a&gt; Import and relicense python-str-repr changes (&lt;a href=&quot;https://redirect.github.com/returntocorp/semgrep/issues/9705&quot;&gt;#9705&lt;/a&gt;)&lt;/li&gt;
  &lt;li&gt;&lt;a href=&quot;https://github.com/semgrep/semgrep/commit/1f6633ceaafc3f4b932187bc1762c99c3729cbc9&quot;&gt;&lt;code&gt;1f6633c&lt;/code&gt;&lt;/a&gt; libs/python-str-repr: Require just Dune 3.7 as everywhere else (&lt;a href=&quot;https://redirect.github.com/returntocorp/semgrep/issues/9704&quot;&gt;#9704&lt;/a&gt;)&lt;/li&gt;
  &lt;li&gt;&lt;a href=&quot;https://github.com/semgrep/semgrep/commit/99bcea208e427c8e6435c71b51559d9d41a72d9a&quot;&gt;&lt;code&gt;99bcea2&lt;/code&gt;&lt;/a&gt; fix: Handle fake tokens during error handling (&lt;a href=&quot;https://redirect.github.com/returntocorp/semgrep/issues/9702&quot;&gt;#9702&lt;/a&gt;)&lt;/li&gt;
  &lt;li&gt;&lt;a href=&quot;https://github.com/semgrep/semgrep/commit/00737bba06a5c1c8a4b9063008622c062d24c1e8&quot;&gt;&lt;code&gt;00737bb&lt;/code&gt;&lt;/a&gt; refactor(c/cpp): streamline preprocessor (&lt;a href=&quot;https://redirect.github.com/returntocorp/semgrep/issues/9681&quot;&gt;#9681&lt;/a&gt;)&lt;/li&gt;
  &lt;li&gt;&lt;a href=&quot;https://github.com/semgrep/semgrep/commit/b0b1d52c60c390ef2dc99638a241d850ef333563&quot;&gt;&lt;code&gt;b0b1d52&lt;/code&gt;&lt;/a&gt; Osemgrep str.&lt;strong&gt;repr&lt;/strong&gt; (&lt;a href=&quot;https://redirect.github.com/returntocorp/semgrep/issues/9694&quot;&gt;#9694&lt;/a&gt;)&lt;/li&gt;
  &lt;li&gt;&lt;a href=&quot;https://github.com/semgrep/semgrep/commit/aca8353394f188126efd2b6716f1fc58354fbcf9&quot;&gt;&lt;code&gt;aca8353&lt;/code&gt;&lt;/a&gt; Osemgrep: gitlab_sast and gitlab_secrets output (&lt;a href=&quot;https://redirect.github.com/returntocorp/semgrep/issues/9699&quot;&gt;#9699&lt;/a&gt;)&lt;/li&gt;
  &lt;li&gt;&lt;a href=&quot;https://github.com/semgrep/semgrep/commit/fd7476a81b7b6234c503cb6b2d4ffaa21211a37b&quot;&gt;&lt;code&gt;fd7476a&lt;/code&gt;&lt;/a&gt; Osemgrep fingerprint: omit pattern-propagators (&lt;a href=&quot;https://redirect.github.com/returntocorp/semgrep/issues/9676&quot;&gt;#9676&lt;/a&gt;)&lt;/li&gt;
  &lt;li&gt;&lt;a href=&quot;https://github.com/semgrep/semgrep/commit/7d7234f328947ad156d629c997f273cd40c3c17f&quot;&gt;&lt;code&gt;7d7234f&lt;/code&gt;&lt;/a&gt; Update language submodules (&lt;a href=&quot;https://redirect.github.com/returntocorp/semgrep/issues/9698&quot;&gt;#9698&lt;/a&gt;)&lt;/li&gt;
  &lt;li&gt;&lt;a href=&quot;https://github.com/semgrep/semgrep/commit/27ac7da5671b06b276c5ede8de2041b3ddbf276e&quot;&gt;&lt;code&gt;27ac7da&lt;/code&gt;&lt;/a&gt; feat: more Git_wrapper functionality (&lt;a href=&quot;https://redirect.github.com/returntocorp/semgrep/issues/9692&quot;&gt;#9692&lt;/a&gt;)&lt;/li&gt;
  &lt;li&gt;Additional commits viewable in &lt;a href=&quot;https://github.com/returntocorp/semgrep/compare/v1.48.0...v1.59.1&quot;&gt;compare view&lt;/a&gt;&lt;/li&gt;
  &lt;/ul&gt;
  &lt;/details&gt;
  
  &lt;br /&gt;
  </code></pre>
  
  
  [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=semgrep&package-manager=pip&previous-version=1.48.0&new-version=1.59.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
  
  Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
  
  [//]: # (dependabot-automerge-start)
  [//]: # (dependabot-automerge-end)
  
  ---
  
  <details>
  <summary>Dependabot commands and options</summary>
  <br />
  
  You can trigger Dependabot actions by commenting on this PR:
  - `@dependabot rebase` will rebase this PR
  - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
  - `@dependabot merge` will merge this PR after your CI passes on it
  - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
  - `@dependabot cancel merge` will cancel a previously requested merge and block automerging
  - `@dependabot reopen` will reopen this PR if it is closed
  - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency
  - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  
  
  </details>

[dependabot]

Superseded by #1820.