Bump semgrep from 0.91.0 to 1.53.0 in /dependencies/python

[dependabot]

Bumps semgrep from 0.91.0 to 1.53.0.

Release notes

Sourced from semgrep's releases.

Release v1.53.0

1.53.0 - 2023-12-12

Added

• Users can now ignore findings locally in Semgrep IDE Extensions, per workspace, and this will persist between restarts (pdx-154)
• A new subcommand 'semgrep test', which is an alias for 'semgrep scan --test'. This means that if you were running semgrep on a test directory, you will now have to use 'semgrep scan test' otherwise it will be interpreted as the new 'semgrep test' subcommand. (subcommand_test)

Changed

• Handling qualified identifiers in constant propagation

  We've added support for qualified identifiers in constant propagation. Notably, this enables the following matches (with the pro engine):

  rules:
    - id: cpp-const-field
      languages:
        - cpp
      message: testing
      severity: INFO
      pattern: std::cout<<1

  #include<iostream>
  #include "a.h"
  namespace B {
  class Bar {
  public:
  static const int one = 1;
  };
  }
  int main() {
  // ruleid: cpp-const-field
  std::cout<<1<<std::endl;
  // ruleid: cpp-const-field
  std::cout&lt;&lt;A::Foo::one&lt;&lt;std::endl;
  

... (truncated)

Changelog

Sourced from semgrep's changelog.

1.53.0 - 2023-12-12

Added

• Users can now ignore findings locally in Semgrep IDE Extensions, per workspace, and this will persist between restarts (pdx-154)
• A new subcommand 'semgrep test', which is an alias for 'semgrep scan --test'. This means that if you were running semgrep on a test directory, you will now have to use 'semgrep scan test' otherwise it will be interpreted as the new 'semgrep test' subcommand. (subcommand_test)

Changed

• Handling qualified identifiers in constant propagation

  We've added support for qualified identifiers in constant propagation. Notably, this enables the following matches (with the pro engine):

  rules:
    - id: cpp-const-field
      languages:
        - cpp
      message: testing
      severity: INFO
      pattern: std::cout<<1

  #include<iostream>
  #include "a.h"
  namespace B {
  class Bar {
  public:
  static const int one = 1;
  };
  }
  int main() {
  // ruleid: cpp-const-field
  std::cout<<1<<std::endl;
  // ruleid: cpp-const-field
  std::cout&lt;&lt;A::Foo::one&lt;&lt;std::endl;
  // ruleid: cpp-const-field
  

... (truncated)

Commits

• ee73b48 chore: Bump version to 1.53.0
• 3c6d8d7 fix(internal): Ensure we set local ID properly (#9396)
• 10f4649 fix(brew): remove pipgrip pinning (#9429)
• cd4561b pre-commit: Pin Black to version 23.10.1 (#9430)
• a5c3a2a Update to urllib3 v2.0 (#9428)
• 59dc0ef Cron - update semgrep-rules (#9424)
• 5e09aaf logging: Reduce noise in -debug's output (#9427)
• f3b4849 Require network capability in Http_helpers functions (#9426)
• 58df265 Add a new 'make test-for-ci', and few commons fixes (#9425)
• d26aa30 commons: update more code to latest commons (#9420)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Superseded by #1487.