PyPI · #815 most downloaded on PyPI

semgrep

1.179.019M downloads/mosemgrep/semgrep ↗New releases in your daily digest, changelog included.

Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.

Last release 3 days ago
02 Oct 2026
Ships on a steady schedule
a new release about every 2 weeks
Nearly every release is documented
notes for 54 of the last 60 stable releases
Nothing withdrawn
no release was ever pulled
6 years old
360 releases · first in 2020

Release timeline

360 releases since 2020

2020202120222023202420252026

20202026

One column per quarter.

Releases

1.179.02 Oct 2026Security
…pick up a PyJWT release with fixes for known vulnerabilities, and projects that require a newer PyJWT can install Semgrep. ( gh-11953 )
1.179.0 - 2026-10-01

### Added

Semgrep Supply Chain now parses Bun bun.lock lockfiles (text format, lockfileVersion 1) paired with a package.json manifest, including the dependency relationships between packages. The deprecated binary bun.lockb format is still unsupported. (SC-2419)

### Changed

Pro: Stabilize file processing order in inter-file analysis, which was previously arbitrary but deterministic. We believe this is very unlikely to affect findings but there is a theoretical path by which it could in certain rare cases. (stabilize)

c grammar update (v0.24.2):

No verified user-facing improvements: Agent feature assessment was not run for this grammar.

(c-v0.24.2)

cpp grammar update (v0.23.4):

C++ target parsing now supports attributes on namespace definitions and preserves their arguments in the AST.

C++ target parsing now supports reference typedef declarators, including references to arrays and functions.

C++ target parsing now supports C++20 lambda pack init-captures such as [...values = args] and [&...values = args]. Capture-sensitive matching remains an existing limitation.

C++ target parsing now supports GNU inline-assembly output operands that are expressions, including pointer dereferences and array accesses.

C++ target parsing now supports composite type arguments in alignas declarations, such as alignas(int *), while preserving the alignment argument.

C++ target parsing now accepts single-digit hexadecimal escapes in string literals, such as "\xA", while retaining support for longer hexadecimal escapes.

(cpp-v0.23.4)

Update the html grammar to v0.23.2. (html-v0.23.2)

r grammar update (v1.3.0):

R target parsing now supports unary and binary help expressions (?) and exponentiation written with **.

R target parsing correctly represents hexadecimal fractional and exponent literals, including imaginary forms, and decimal or exponent notation with the L suffix.

R target parsing now supports quoted namespace and slot names, such as "base"::"mean" and x@"slot".

R parsing preserves else branches placed on a new line within braced expressions.

R string parsing preserves literal newlines and excludes raw-string delimiters from string values. Short hexadecimal and Unicode escape spellings are accepted; escape decoding remains unchanged.

R parsing preserves omitted argument positions in calls and subscripts, and retains the indexed expression for single-index subscripts.

(r-v1.3.0)

sfapex grammar update (v2.3):

Apex target parsing now supports null-coalescing expressions using ??, preserving both operands.

Apex target parsing now supports DML operations with explicit as user and as system security modes, retaining the mode, operation targets, and optional upsert key.

Apex target parsing now supports numeric package-version expressions such as Package.Version.1.2.

Apex target parsing now recognizes the webservice modifier and annotations with empty argument lists.

Apex target parsing now accepts whitespace within relational and shift operators, including compound shift assignments.

Embedded SOQL parsing in Apex now supports dotted TYPEOF operands, functions such as convertTimezone, and HAVING comparisons on grouped fields.

Apex target parsing now supports multiple top-level method declarations followed by executable statements in anonymous Apex.

Apex parsing now preserves native java: qualifiers on types and supports java:-prefixed field-access expressions.

Apex patterns now distinguish safe navigation (?.) from ordinary field and method access (.).

(sfapex-v2.3)

### Fixed

Python: except A, B: and except A, B, C: (PEP 758, Python 3.14) and the
except* forms of both are now parsed as a tuple of exception types, like
except (A, B):, rather than as the Python 2 except A as B: or a parse
error. except* is now handled by Semgrep's primary Python parser too, so
exception groups no longer depend on the fallback parser. Note that Python
2's except A, e: is no longer read as except A as e:, even for python2.
One limitation remains: the vendored tree-sitter Python grammar still accepts
only a single comma, so except A, B, C: is still a parse error there. The
menhir parser runs first and handles it, so this only surfaces if the
tree-sitter fallback is reached; upgrading the vendored grammar is follow-up
work. (gh-11906)

Fix Dockerfile parsing for environment-expanded EXPOSE ports with TCP/UDP protocols. (gh-11934)

Semgrep now allows PyJWT 2.15 and later (pyjwt[crypto]>=2.15.0,<3) instead of
pinning ~=2.13.0, so installs pick up a PyJWT release with fixes for known
vulnerabilities, and projects that require a newer PyJWT can install Semgrep. (gh-11953)

1.177.010 Sept 20263 sources agree

Added native Supply Chain support for Bazel workspaces using rules_jvm_external . Semgrep now recognizes a maven_install.json pinned lockfile (version

1.177.0 - 2026-09-10

### Added

Added native Supply Chain support for Bazel workspaces using rules_jvm_external. Semgrep now recognizes a maven_install.json pinned lockfile (versions 0.1.0 and 3, as emitted by rules_jvm_external 3.x through current) paired with a MODULE.bazel (or legacy WORKSPACE / WORKSPACE.bazel) marker as a Maven-ecosystem subproject, and attributes findings to the workspace root rather than the lockfile's directory. Workspace-declared root artifacts are identified via __INPUT_ARTIFACTS_HASH for accurate direct-vs-transitive classification; dependencies are emitted with Unknown transitivity when that field is not available. This is the first milestone of native Bazel coverage; broader ecosystem support (rules_python, rules_go, rules_js) and Bazel-aware reachability attribution follow. (SC-2008)
Several performance improvements for regex-only rules where the underlying
regex are inefficient to run on our default regex engine (currently PCRE2). For
example, a rule matching FOOBAR(a+)\1 will skip any file that does not
contain FOOBAR without running the regex. (scrt-979)

### Changed

Prefilter conditions now evaluate their cheap string predicates before their
expensive regex predicates. Since evaluation short-circuits, a file that a
string check already rules in or out no longer pays for regex predicates
(which is what a pattern's prefilter falls back to when no literal substring
can be extracted from it, and which can be slow on files with very long
lines). (prefilter-rank-conjuncts)
Supply Chain scans can report dependencies from their Gradle module build files instead of the root manifest. This behavior is disabled by default during rollout and can be tested with --x-gradle-module-attribution. Enabling it can change finding IDs because finding paths change; the ID calculation is unchanged. (SC-2560)

### Fixed

Speed up semgrep ci filtering when a deployment has many triage-ignored findings. (triage-ignored-performance)
Semgrep no longer crashes with an OCaml stack trace when a proxy environment
variable holds an unusable value. HTTP_PROXY, HTTPS_PROXY, or ALL_PROXY
set to an empty value is now ignored with a warning, and the scan
proceeds without a proxy. A non-empty value that is not a usable proxy URL
now exits with an error message, with any credentials in the URL
redacted, instead of failing inside the HTTP client.

Semgrep also now adds the missing scheme to a proxy URL supplied
without one; https for HTTPS_PROXY and http` otherwise. (ENGINE-2208)
Supply Chain: lockfileless Gradle scans now report a "Resource Inaccessible"
resolution error when a repository refuses a request (for example a 401 from a
private registry), instead of exiting successfully with a silently incomplete
dependency list. (sc-3358)

### Infra/Release Changes

Improves shutdown time during scans with --trace. (otel-shutdown-flush)

Open source →

1.173.013 Aug 20263 sources agree

semgrep-core -version now reports the git commit that the binary was built from. (core-version-git-sha)

1.173.0 - 2026-08-12

### Added

semgrep-core -version now reports the git commit that the binary was built
from. (core-version-git-sha)
Pro: Added a no_disk_cache memory policy (--x-mem-policy no_disk_cache) to trade higher memory usage for not caching intermediary scan data structures on disk. (no-disk-cache-memory-policy)

### Changed

File targeting now submits path-filtering work to worker domains in batches
removing multithreaded synchronization overhead for very large repos. (ENGINE-2854)
Parallel rule parsing for large rulesets now shards rules into files sized by
bytes rather than by worker count, stabilizing memory allocations at parse-time
and improving parsing throughput. (ENGINE-2920)
Updated the Solidity parser for newer language features (transient storage, named mapping parameters, layout at, assembly flags, global using-directives, EVM Cancun builtins) and corrected ternary/?: vs member-access precedence. (LANG-207)
Pro: Unsupported patterns in case expressions are now handled more
robustly, with improved error recovery during taint analysis — branch
bodies are no longer dropped from the dataflow intermediate language when
a pattern can't be compiled. Pattern matching in statement position also
now benefits from the same compilation as expression position. (LANG-598)
Improved performance in highly parallel scans with many target files, running
on systems using the musl libc implementation. (pcre2-match-data-reuse)

### Fixed

When the internal semgrep-core RPC subprocess is terminated by a signal (for
example an out-of-memory kill or a segfault), Semgrep now logs a clear error
naming the signal, instead of the misleading "Expected a number, got ''"
message. When debug logging is enabled, the tail of the subprocess's stderr is
included as well. (rpc-subprocess-death-diagnostics)
A target file whose path filtering failed was silently omitted from the scan,
appearing in neither the results nor the list of skipped targets. Such paths
are now retried, and any that still fail are reported as skipped targets so
they show up in the scan report. (ENGINE-2854)
Fixed a bug where a capture-group metavariable-regex or a binding-introducing
metavariable-pattern would emit a duplicate finding on the same range whose
message still contained the raw metavariable (e.g. a hash $ALG was detected)
instead of the substituted value. Only the correctly-substituted finding is now
reported. (ENGINE-2932)
Fixed fully-qualified name resolution for Rust symbols imported via a braced
grouped use with a nested path (e.g. use a::b::C). It was wrongly being
resolved as b::a::C. (LANG-234)
Fixed an issue where MCP mode could fail to scan UTF-8 files containing multibyte characters, including Japanese text, on systems using a non-UTF-8 locale such as cp932. Files are now read as UTF-8, with undecodable bytes replaced so a single unusual file does not fail the entire scan. (gdn-168)

Open source →

1.172.028 Jul 20263 sources agree

Added support for the OpenTofu .tofu file extension. Because OpenTofu uses the same HCL grammar as Terraform, .tofu files are now automatically detect

1.172.0 - 2026-07-28

### Added

Added support for the OpenTofu .tofu file extension. Because OpenTofu uses the same HCL grammar as Terraform, .tofu files are now automatically detected and scanned as Terraform, so they are picked up by recursive scans and Terraform rulesets (e.g. p/terraform) with no extra configuration. (ENGINE-2884)

### Changed

Updated the Ruby parser to tree-sitter-ruby v0.23.1, improving support for !=, case/when expressions with line breaks, and element references that take a block. (LANG-206)
The window for collecting git contributor information during semgrep ci has been extended from the last 30 days to the last 90 days, to match the updated usage policy. (contributor-window-90-days)

### Fixed

Semgrep will now print richer error messages on segfaults when --debug is NOT passed, matching the segfault error output when --debug is passed (engine-segv)
Fixed a source of rare, nondeterministic crashes and incorrect results caused by an OCaml compiler bug. Semgrep now builds against a compiler fork that backports the upstream fix. (ocaml_codegen_fix)
Fixed excessive heap growth after explicit major garbage collections. Semgrep now builds against an OCaml compiler that improves garbage collection duty cycle pacing. (ocaml_gc_pacing_fix)
Improved the Scan Status output when no code rules will run (e.g. a Secrets-only or Supply-Chain-only scan). The summary line no longer reports a confusing "0 Code rules", and the "Code Rules" section now states explicitly either that code scanning is not enabled or that there are no code rules to run, instead of printing an empty table. (ENGINE-2878)
Fixed lockfileless Gradle dependency resolution failing with "Parsing dependency output failed (Resolve_gradle.gradle_resolved_dependency)". The github-dependency-graph-gradle-plugin used during resolution was fetched unpinned, and its 1.4.2 release renamed keys in its JSON output. The plugin is now pinned to 1.4.1. (sc-3738)

Open source →

1.171.022 Jul 2026

Added support for the OpenTofu .tofu file extension. Because OpenTofu uses the same HCL grammar as Terraform, .tofu files are now automatically detect

1.171.0 - 2026-07-22

### Added

Added support for the OpenTofu .tofu file extension. Because OpenTofu uses the same HCL grammar as Terraform, .tofu files are now automatically detected and scanned as Terraform, so they are picked up by recursive scans and Terraform rulesets (e.g. p/terraform) with no extra configuration. (ENGINE-2884)

### Changed

The window for collecting git contributor information during semgrep ci has been extended from the last 30 days to the last 90 days, to match the updated usage policy. (contributor-window-90-days)

### Fixed

Fixed a source of rare, nondeterministic crashes and incorrect results caused by an OCaml compiler bug. Semgrep now builds against a compiler fork that backports the upstream fix. (ocaml_codegen_fix)
Fixed excessive heap growth after explicit major garbage collections. Semgrep now builds against an OCaml compiler that improves garbage collection duty cycle pacing. (ocaml_gc_pacing_fix)
Improved the Scan Status output when no code rules will run (e.g. a Secrets-only or Supply-Chain-only scan). The summary line no longer reports a confusing "0 Code rules", and the "Code Rules" section now states explicitly either that code scanning is not enabled or that there are no code rules to run, instead of printing an empty table. (ENGINE-2878)
Fixed lockfileless Gradle dependency resolution failing with "Parsing dependency output failed (Resolve_gradle.gradle_resolved_dependency)". The github-dependency-graph-gradle-plugin used during resolution was fetched unpinned, and its 1.4.2 release renamed keys in its JSON output. The plugin is now pinned to 1.4.1. (sc-3738)

Open source →

1.170.015 Jul 20263 sources agree

Pro C/C++ scans now skip code inside statically-dead preprocessor branches (for example, #if 0 ... #else ... #endif). Patterns that would otherwise ma

1.170.0 - 2026-07-15

### Added

Pro C/C++ scans now skip code inside statically-dead preprocessor branches (for example, #if 0 ... #else ... #endif). Patterns that would otherwise match against intentionally-disabled code no longer report on it. (cpp-if-zero-filter)
Restored obackward: semgrep-core and semgrep-core-proprietary once again print a backtrace when receiving a fatal signal (e.g. SIGSEGV) (obackward)
semgrep install-semgrep-pro now sends usage metrics so that installation errors can be tracked. Metrics can be disabled with --metrics off or SEMGREP_SEND_METRICS=off. Metrics payloads also now include the method used to install the Semgrep CLI (pip, homebrew, docker, or unknown), detected heuristically. See metrics.md for more details of what exactly is sent. (engine-2858)

### Changed

Increased the timeout for dynamic dependency resolution subprocesses from 600 to 900 seconds, giving large projects more time to resolve dependencies before timing out. (SC-3699)
Pro C/C++ #if 0 filtering now also handles cases where the directive splits a syntactic unit. For example, a function signature toggle like #if 0 void foo(int i) { #else void foo(uint32_t i) { #endif. (engine-994)

### Fixed

Fixed a crash at startup (Fatal error: Failed to allocate signal stack for domain 0) when running Semgrep on systems with musl 1.2.6 (e.g. Alpine 3.24) on recent Intel CPUs whose kernel-reported minimum signal-stack size exceeds musl's build-time SIGSTKSZ (notably AMX-capable Xeons). (ENGINE-2863)
Dockerfile: Fixed parse errors on RUN instructions that use heredoc syntax (<<EOF, <<-EOF, quoted delimiters). (LANG-263)
metavariable-type now supports fully qualified type names in languages where a qualified name in type position parses as an expression (e.g. Python's types: [a.b.C]) when the metavariable's type is determined by type inference, such as Pro engine cross-file type resolution. (LANG-583)
Updated the ocaml-tree-sitter-core dependency to the latest main.
- Fails loudly on a parser/runtime ABI mismatch
- Stamps every generated parser.c with the tree-sitter version that produced it.
- Changed paths where tree-sitter versions are installed (lang-591)

Open source →

1.168.024 Jun 2026Deprecated3 sources agree

Aliengrep (generic mode) now uses the maintained libpcre2 10.x regular-expression library instead of the deprecated libpcre 8.x. Matching behavior is…

1.168.0 - 2026-06-24

### Added

Added an experimental --x-dependency-paths flag to scan and ci that includes the full dependency path(s) for transitive supply-chain findings in --json and --sarif output. (SC-3547)

### Changed

Malicious supply chain rules are now labeled "Malicious" instead of "Basic" in the scan analysis summary table. (SC-3504)

### Infra/Release Changes

semgrep-core no longer depends on libpcre 8.x; libpcre2 10.x is now the sole regex engine. (drop-libpcre)
Aliengrep (generic mode) now uses the maintained libpcre2 10.x regular-expression library instead of the deprecated libpcre 8.x. Matching behavior is unchanged. (aliengrep-pcre2)
The metavariable-regex and metavariable-comparison (re.match()) runtimes now use the maintained libpcre2 10.x library instead of the deprecated libpcre 8.x. Matching behavior is unchanged. (eval-generic-pcre2)

Open source →

1.167.017 Jun 20263 sources agree

Added support for more operators for folding for constant propagation, including subtraction, division, bit ops, bit shifts, comparisons, and more. (c

1.167.0 - 2026-06-17

### Added

Added support for more operators for folding for constant propagation, including subtraction, division, bit ops, bit shifts, comparisons, and more. (const-folding)
Added a nosemgrep_disabled field to the scan configuration so the platform can disable nosemgrep inline ignore comments org-wide for a scan. (APPEX-1122)
Semgrep now skips binary files (images, archives, compiled executables, etc.) during scanning by default, detected via matching file extensions to known file-format magic bytes Pass --no-exclude-binary-files to scan binary files as before. (ENGINE-2708)

### Fixed

semgrep ci with --sarif now correctly populates the output's ignores field with nosemgrep-suppressed findings, in accordance with other output formatters. (gh-6651)

### Infra/Release Changes

Updated the ocaml-tree-sitter-core submodule to the latest upstream main, providing
- improved thread-safety
- bumps the tree-sitter CLI option used from 0.20.6 to 0.20.8.
(ocaml-tree-sitter-core-bump)

Open source →

1.166.011 Jun 20263 sources agree

Pro: Added experimental cross-file (interfile) analysis for Gosu, enabling taint tracking across multiple Gosu source files. (gosu-interfile)

1.166.0 - 2026-06-11

### Added

Pro: Added experimental cross-file (interfile) analysis for Gosu, enabling taint tracking across multiple Gosu source files. (gosu-interfile)
Added support for more operators for folding for constant propagation, including subtraction, division, bit ops, bit shifts, comparisons, and more (ENGINE-2789)

### Fixed

Fixed parsing of integer literals with an underscore immediately after the radix prefix (e.g. 0x_dead_beef, 0o_755, 0b_1010_1010). (LANG-533)
Python parsing now preserves type parameters on def and class definitions. (LANG-536)
Semgrep no longer stores the API token in ~/.semgrep/settings.yml's stored token when the current scan's token is supplied via the SEMGREP_APP_TOKEN envvar. (SEC-2240)
semgrep ci scans originating from a pre-commit hook will no longer fail with Unable to create '<tmp>/.git/index.lock': Not a directory in certain cases. (engine-2736)

### Infra/Release Changes

Added parsing tests covering Python language features (Python 3.0–3.12). (LANG-531)

Open source →

1.165.03 Jun 2026Deprecated3 sources agree

--x-no-python-schema-validation is still accepted as a no-op with a deprecation warning, and will be removed in a future release. (x-rule-validation)

1.165.0 - 2026-06-03

### Added

Added --max-match-context-size option to limit the number of characters of source code included as context for each match in the output. This prevents matches in minified files (e.g., minified JavaScript where the entire file is a single line) from producing enormous output Set to 0 for unlimited, which is the default value. (ENGINE-2117)

### Changed

Replaced --x-no-python-schema-validation with a value-taking --x-rule-validation=full|core-only|none flag. The default (full) preserves existing Python rule validation behavior; core-only matches the old flag's semantics (disables Python rule validation and uses semgrep-core RPC validation only); none skips both pre-validation passes, surfacing rule errors at scan-time. --x-no-python-schema-validation is still accepted as a no-op with a deprecation warning, and will be removed in a future release. (x-rule-validation)
Python: Updated Python grammar (LANG-201)

### Fixed

Added bit shift operations to metavar comparison in addition to already present standard arithmetic operators and logical bit ops. (ENGINE-2448)
Reduce intermittent validation_error results on HTTP secret validators (Facebook, Slack, Stripe, Google, Cloudflare, etc.) by retrying transient network failures, mirroring the retry behavior already present for AWS validators. (SCRT-965)

Open source →

1.164.027 May 20263 sources agree

Dart: typed metavariables ($X as T) and metavariable-type, metavariable binding inside string interpolations, and function-definition patterns that ma

1.164.0 - 2026-05-26

### Added

Dart: typed metavariables ($X as T) and metavariable-type, metavariable binding inside string interpolations, and function-definition patterns that match Dart function definitions. (gh-11678)

### Changed

The default memory limit for Pro interfile scans on Linux now adapts to the container's cgroup memory limit (90% of it) instead of the previous fixed 5 GiB, with an 8 GiB fallback when no cgroup limit is detected. (ENGINE-2568)
Lower the glibc contraint from >=2.35 to >=2.34, allowing users on distros that ship glibc 2.34 (e.g RHEL 9 & AL2023) to install the semgrep wheel. (gh-11622)

### Fixed

Baseline diff scans (semgrep ci and --baseline-commit) no longer treat every finding on a file as newly introduced when rule(s) failed during the baseline run.

Per-rule failures (for example a timeout for a single rule) on baseline analysis now hide only that rule's matches on that file from the "new vs baseline" comparison. Other rules on the same file are still taken in comparison for the "new vs baseline" comparison.

Per-file, rule-independent failures now hide all findings on that file from the "new vs baseline" comparison. (LANG-515)
Fixed a yarn.lock parse error on Yarn Berry entries written in YAML explicit-key form. Affected lockfiles previously failed to parse. (SC-3479)
The (beta) SBT resolver with --allow-local-builds now correctly identifies dependencies as part of the Maven ecosystem. (SC-3522)
Fix --sarif-output and --sarif causing nosemgrep-suppressed findings to be reported in CLI scan output and to block scans. Suppressed findings are now correctly excluded from terminal text output, the scan-summary count, and the CLI's exit code. (engine-1824)
Fixed a bug that could cause unreliable target filtering in parallel scans. (gh-6313)
Dart: improved parser fidelity for Dart 3 grammar features and routed pattern parsing for statements beginning with await, rethrow, and other statement keywords. Eliminates a large class of PartialParsing errors on real-world pub.dev packages. (gh-11678)

### Infra/Release Changes

pro: macOS: Fixed dynamic library lookup for semgrep-core-proprietary so the binary works when semgrep install-semgrep-pro is invoked, and semgrep is installed via Homebrew. (pro-binary-homebrew)
Pro: Added optional <case>.named_ast.expect golden files for tests/intrafile/maturity/ fixtures, exercised by Unit_maturity_named_asts. (LANG-287)

Open source →

1.163.013 May 20263 sources agree

Updated PHP target parsing to support grammar changes from PHP 8.1-8.5 (LANG-380)

1.163.0 - 2026-05-13

### Added

Updated PHP target parsing to support grammar changes from PHP 8.1-8.5 (LANG-380)

### Changed

Improved semgrep ci startup time with App-provided rules by avoiding duplicate semgrep-core rule validation during CLI rule loading while preserving config-style failures for invalid rules. (ci-rule-validation-startup)
Semgrep now validates dependency aware rules only on the core side, improving startup time (validate-skip-dep-aware)
Rule validation now runs in parallel across cores on large rulesets, reducing scan startup time. (gh-6279)
Rule parsing now runs in parallel across shards on multi-core machines, reducing scan startup time on large rulesets. (gh-6281)

### Fixed

Improved name resolution for fully-qualified names in Java, Kotlin, and Scala. This could lead to fewer false positives and more true positives when the code under analysis uses fully-qualified names instead of imports. (java-qualified)
Optimised rule prefiltering and parsing to improve engine startup time. (rule-parse-cache)
Reduced peak memory usage when scanning repos with large rulesets. (rules-json-compact)
Fixed transitive reachability rule parsing performance: the temporary rule file written for each transitive-reachability RPC call is JSON content (json.dumps([rule.raw])) but was being created with a .yaml suffix. OCaml's Parse_rule.parse_file dispatches purely on file extension, so this routed every TR rule through Yaml_to_generic.parse_yaml_file (the slow YAML path) instead of Fast_json.parse_program (the new hand-written RFC 8259 parser). Switching the suffix to .json lines the suffix up with the actual content and lets every TR rule parse take the fast path. (tr-json-suffix)
Pro: Fixed a naming resolution bug in Java. (LANG-274)

Open source →

1.162.07 May 20263 sources agree

pro: Improved support for tracking taint through nested functions. (LANG-95)

1.162.0 - 2026-05-07

### Added

pro: Improved support for tracking taint through nested functions. (LANG-95)
Added indexes to file targeting to improve performance of semgrepignore matching. (gh-27830)

### Changed

Faster JSON rule parsing: rule files in JSON format now parse roughly 5x faster end-to-end (measured ~134s → ~28s on a 382MB rule pack) by going through a new hand-written RFC 8259 parser instead of the previous JS-parser-based chain. (ENGINE-2725)
Scala projects are now identified for Supply Chain only by their root build.sbt, rather than treating each build.sbt as a different subproject. (SC-3293)
MCP semgrep_findings tool: added a refs parameter to filter findings by branch (defaults to the primary branch when not specified), and made autotriage_verdict optional so that findings without an AI verdict can also be returned. (engine-2723)

### Fixed

jsonnet: import and importstr now reject paths that resolve outside the rule file's parent directory. (ENGINE-2727)
semgrep ci: redact URL-embedded credentials and Authorization header values from git error messages and from the captured tracebacks sent to the fail-open telemetry endpoint, preventing leaks of secrets like CI_JOB_TOKEN from a failed git fetch in GitLab CI. Also closes ENGINE-2731 (raw, unsanitized tracebacks in fail-open telemetry). (ENGINE-2728)
semgrep ci no longer transmits SCM tokens to the Semgrep Platform. (ENGINE-2729)
semgrep CLI: the on-disk log file (~/.semgrep/semgrep.log or $SEMGREP_LOG_FILE) now respects the requested log level instead of always being written at DEBUG. This narrows the surface for credentials to land on disk via CI runner filesystems or job artifacts; pass --debug to restore the previous behavior. (ENGINE-2730)
jsonnet rules: bound recursion in both rule loading and evaluation so a malicious rule can no longer hang semgrep via mutually-recursive imports or runtime function calls that recurse forever. (ENGINE-2727-dos)
Scala: Merging consecutive top-level package declarations into a single package path. (LANG-374)
Fixed PHP parse errors during highly-parallel parsing. (gh-6197)
Fixed Scala parse errors during highly-parallel parsing. (gh-6198)
Surface a clearer error from the MCP scan tool when metrics is off and auto config is specified (gh-11649)
Fixed unknown option error when spawning the MCP daemon (gh-11660)

Open source →

1.158.010 Apr 20263 sources agree

Added support for a supply chain hook for the Semgrep Plugin (supply-chain-hook)

1.158.0 - 2026-04-09

### Added

Added support for a supply chain hook for the Semgrep Plugin (supply-chain-hook)
Computing taint configs, ~1/4-1/2 of the semgrep-core time in interfile scans, is now done in parallel according to the number of jobs (ENGINE-2649)
Semgrep Pro interfile engine (--pro) taint analysis has been redesigned, significantly improving performance (estimated 20-40% improvement). This improvement introduces a slight change in how findings are generated, that may result in more true positives, or less false positives. To revert to previous behavior, pass --no-x-run-taint-once as a flag. (engine-2468)

### Changed

semgrep-core macOS binaries are now dynamically linked to the system's libraries. (macos-binary-build)
semgrep-core manylinux binaries are now dynamically linked to the system's glibc on glibc systems. This introduces a minimum glibc version requirement of >=2.35, which is satisfied in Ubuntu >=22.04, Debian >=12, RHEL >=10, and other glibc distributions with at least glibc 2.35. Linux systems running an older glibc will need to upgrade their OS. (manylinux-binary-build)
The manylinux wheel is now tagged as manylinux_2_35_<arch>, reflecting a minimum requirement of glibc version 2.35. (manylinux-wheel-tag)
semgrep-core musllinux binaries are now dynamically linked to the system's musl libc on musl systems. (musllinux-binary-build)
The musllinux PyPI wheel is now tagged as musllinux_1_2_<arch>, reflecting a requirement of musl libc version 1.2. (musllinux-wheel-tag)
The LSP and MCP servers now use the v2 config download endpoint by default when fetching rules from Semgrep AppSec Platform. Set SEMGREP_DISABLE_CONFIG_DOWNLOAD_V2=1 to fall back to the legacy endpoint. (SMS-2284)

### Fixed

Fixed IDE login issues where network errors during token verification were incorrectly clearing the saved token. The LSP now distinguishes 401 Unauthorized (invalid token) from other errors (e.g. network failures), surfacing appropriate messages instead. (ide-login)
Fixed SARIF taint trace output: step locations now use the correct file URI, and the full taint sink call trace is included in codeFlows. (engine-2570)
The --x-mem-policy flag now propagates to the RPC subprocess, fixing memory tuning for dependency resolution and other RPC-based operations. (pylon-20772)

Open source →

1.157.031 Mar 20263 sources agree

pro: Improved taint tracking through lambda calls. (LANG-268)

1.157.0 - 2026-03-31

### Added

pro: Improved taint tracking through lambda calls. (LANG-268)
It is now possible to match a class name like in $C.getInstance(...), and then use metavariable-type on $C to check its type. (LANG-271)
pro: Improve cross-file taint tracking for globals. (LANG-275)

### Changed

Pro: Reduces redundant recomputation during inter-file taint analysis by serializing intermediate results to disk. (ENGINE-2582)
pro: Improved golang module resolution. (code-9225)
Supply Chain Analysis of npm package lock files now uses a proprietary OCaml-based parser, replacing the old Python version. The supply-chain functionality for these files is now available only to Semgrep Pro users. (gh-5658)

### Fixed

Fix Rust parsing of "&raw" where "raw" is an identifier. (rust-parser-updated)
Errors during target file discovery (e.g., permission errors, git failures) are now surfaced as warnings instead of being silently ignored. (ENGINE-2627)
kotlin: Fixed bug parsing FQNs in metavariable-type. (LANG-271)
Fixed requirements.txt parser silently dropping pinned dependencies that followed unpinned package names. (SC-3379)
Prevented certain deeply nested aliengrep matches from segfaulting semgrep-core. (engine-2628)
Fix Python parsing for files that contains empty strings (or quotes in docstrings) along with match statements. (gh-11287)
Fix rule paths.include/paths.exclude filtering when a single file is passed as a scan target. Previously, path patterns like '/src/test//*.java' would not match because only the filename was used for filtering instead of the full project-relative path. (gh-11560)
Pro: Improved type resolution in Scala (lang-79)
Pro: Improved call resolution in Scala for parameterless methods (lang-80)

Open source →

1.155.011 Mar 20263 sources agree

Added support for (agentic) hooks in Windsurf. (windsurf-hooks)

1.155.0 - 2026-03-11

### Added

Added support for (agentic) hooks in Windsurf. (windsurf-hooks)
scala: Improved support for Scala 3's optional braces. (LANG-218)
Added PowerShell language support (beta) with parsing and pattern matching (lang-233)

### Changed

Removed the experimental and undocumented command semgrep install-ci. (osemgrep-install-ci)
Migrate from publishing a single Linux wheel with the platform tag musllinux_1_0_<arch>.manylinux2014_<arch> to publishing two separate wheels:
- A wheel with the platform tag musllinux_1_0_<arch>
- A wheel with the platform tag manylinux2014_<arch>
(pypi-linux-tag)

### Fixed

When performing parallel operations over a small number of input items, the engine no longer spawns more OCaml domains than we have items to process. This assists with resource utilisation. (engine-2588)
Fixed: Prevent SessionStart hook crash when inject-secure-defaults receives empty stdin (JSONDecodeError). (engine-2592)
Semgrep secret validation now times out after 30 seconds instead of 15 minutes. Additionally this timeout is configurable via the --secrets-timeout flag. (engine-2593)
Fixed permission errors during lockfileless Java (Gradle) dependency resolution by invoking gradlew via sh when the executable bit is not set (gh-5747)

Open source →

1.154.04 Mar 20263 sources agree

Fix crash on Windows when running semgrep ci with --debug and no blocking findings. The Windows subprocess path incorrectly raised an exception for al

1.154.0 - 2026-03-04

### Fixed

Fix crash on Windows when running semgrep ci with --debug and no blocking findings. The Windows subprocess path incorrectly raised an exception for all pysemgrep exit codes (including 0), which was silently swallowed in normal mode but propagated as a fatal error when --debug was active. (ENGINE-2491)
Changed default memory policy from "eager" to "balanced". Scan times should noticably improve; however, scans may use 5-10% additional memory. If running in a resource-constrained environment, consider setting the memory policy back to "aggressive". (engine-2055)
When Semgrep decides which files to scan (targeting), it can take a long time (over 5 minutes) on very large repos (> 10k files). Semgrep will now parallelize this work according to the number of jobs passed (-j) (engine-2512)
Fixed a performance issues where passing many scannign roots on the command line (e.g. semgrep scan $(git ls-files '*.py')) caused one semgrep-core subprocess to be spawned per file. Roots that are not directories are now handled directly in Python without any subprocess overhead. (gh-11404)
Scala: Restored parse rate after mistaken bug introduced by implicit block parsing fix (lang-215)

Open source →

1.152.018 Feb 20263 sources agree

Hooks (for both Claude Code and Cursor) now pull custom rules from the registry (custom-rules-hooks)

1.152.0 - 2026-02-17

### Added

Hooks (for both Claude Code and Cursor) now pull custom rules from the registry (custom-rules-hooks)
Turned on DNS rebinding protection for the MCP server (dns-check)
Environment variables can now be passed to third-party package managers invoked as part of --allow-local-builds dependency resolution via the environment variable SEMGREP_LOCAL_BUILD_ENV, which accepts a JSON object with string keys and string values. (SC-3163)
Memory management policies

A memory policy defines how OCaml's garbage collector should be configured for a scan. There are two initial policies: "aggressive", the current behaviour, which trades longer scan times for lower memory use, and "balanced", which finds a middle ground between reclaiming heap memory in short order while limiting how often the garbage collector runs. The policy can be configured via the --x-mem-policy CLI flag for the pro engine; this flag is unused in the OSS engine. (engine-2055)
Added experimental support for the OpenFGA authorization language. Thanks to Alex Useche (@hex0punk) for the contribution! (gh-11347)

Allows case insensitive string comparisons using lower() and upper() like this:

- metavariable-comparison:
    metavariable: $VALUE
    comparison: upper(str($VALUE)) == "SEMGREP"

(gh-11502)

Blocking findings that are outputted in the CI output are now labelled as such. (#4394)

### Changed

pro: There should be fewer FNs when the max number of fields to track per object is reached. (code-9224)
Remove legacy combined symbol analysis computation and upload in favor of per-subproject symbol analysis (sc-3153)

### Fixed

pro: Improved accuracy of taint tracking through assignments, this will help reduce FPs in some cases. (code-9220)
When receiving a 429 or 5xx from the Semgrep app, the CLI will wait for a longer period of time before retrying the request, to spread out requests during periods of app instability. (engine-2550)

Open source →

1.147.07 Jan 20263 sources agree

Gradle lockfiles of the form gradle*.lockfile are now supported. Previously, only lockfiles named exactly gradle.lockfile were supported. (SC-2999)

1.147.0 - 2026-01-07

Added

Gradle lockfiles of the form gradle*.lockfile are now supported. Previously, only lockfiles named exactly gradle.lockfile were supported. (SC-2999)
semgrep login now supports a --force flag, which ignores existing tokens and starts a new login session. The MCP setup workflow has been updated to use --force too. (saf-2392)

Fixed

Deduplication should now pick the exact same findings across scans. Previously, findings were always equivalent, but not guaranteed to be exactly the same (e.g. metavariable bindings could differ). Depending on the rule and target code, this could cause findings' fingerprints to change from one scan to another, thus leading to finding flakiness and "cycling" in Semgrep App. Note that when upgrading to this Semgrep version, you may see different (but equivalent) findings wrt your current Semgrep version in the first scan, one more time. However, in subsequent scans/upgrades, this problem should go away or at least be greatly reduced. (saf-2304)

Open source →

1.146.017 Dec 20253 sources agree

Added support for Cursor post-code-generation hooks via new record-file-edit and stop-cli-scan semgrep mcp flags (cursor-hooks)

1.146.0 - 2025-12-17

Added

Added support for Cursor post-code-generation hooks via new record-file-edit and stop-cli-scan semgrep mcp flags (cursor-hooks)
Added skipped_paths field to CI scan results to report files that failed to scan due to errors (timeout, OOM, etc.), preventing the app from incorrectly marking findings in those files as fixed (gh-5122)
Symbol analysis, if enabled, now runs for Supply Chain only scans when calling semgrep ci. (sc-2927)

Changed

Semgrep's Docker image base has been bumped from Alpine Linux 3.22 to 3.23 (docker-version)
bumped the mcp python-sdk from 1.16.0 to 1.23.3 (mcp-version)
pro: [experimental] enabling and disabling transitive reachability analysis in semgrep ci regardless of app settings is now possible with --x-enable-transitive-reachability (or --x-tr) and --x-disable-transitive-reachability. (tr-flags)

Fixed

The PHP AST now distinguishes between if statements with no else clause and those with an explicit but empty else {}. (gh-11330)
git-lfs objects are now excluded from baseline scans, as they are usually binary files, or simply too large to scan. (saf-2020)
Fix a OCaml stdlib bug that would cause nondeterministic UnixErrors on Windows under the multicore runtime due to a race condition in the socketpair implementation (saf-2316)
Fixed an issue that in rare cases could lead timeouts to be mishandled. This typically manifested only through slightly different warning messages, but it is possible that more serious consequences could have occasionally resulted. (saf-2368)
Fixed symbol analysis incorrectly analyzing all files instead of only the relevant language files per ecosystem. (sc-3020)

Open source →

1.145.05 Dec 20253 sources agree

Added optional user-prompting for classifying findings as true/false positives via MCP Elicitation in the MCP server (behind SEMGREP_FINDINGS_ELICITAT

1.145.0 - 2025-12-04

Added

Added optional user-prompting for classifying findings as true/false positives via MCP Elicitation in the MCP server (behind SEMGREP_FINDINGS_ELICITATION_ENABLED, off by default). (elicitation)
Added hook to inject secure-by-default library recommendations into Claude Code Agent context. (secure-defaults-hook)

Changed

Symbol analysis upload now runs before scan completion to ensure it is available during initial scan postprocessing. (sc-2933)

Fixed

Fix issue that could lead to validation failures for certain well-formed rules, such as those with emoji in their messages. (incid-293)
The correct range for let ... in expressions in OCaml is now reported. Previously, the location of the let was omitted. This is mainly relevant for autofix. (ocaml-let)
Debug log lines concerning telemetry collection that are only relevant inside Semgrep's managed scanning environment are not emitted if a scan runs outside that environment. (saf-2321)
pro: in 1.144.0 interfile scans no longer default to -j 1; instead, the number of available CPUs on the system was used to inform how many jobs should be spawned. This caused a change in timeouts due to how time is measured for certain parts of the pro engine. This change has now been reverted (saf-default-jobs)

Open source →

1.143.012 Nov 2025Deprecated3 sources agree

Users can opt into the legacy method with the --x-parmap CLI flag, and this deprecates the --x-eio flag (since it is now the default behaviour). (saf-…

1.143.0 - 2025-11-12

Added

Dataflow will now understand empty block expressions as having unit value in more instances. (code-9141)
Parallel scans will now use shared-memory parallelism using multicore OCaml domains, rather than the legacy fork-join approach. Users can opt into the legacy method with the --x-parmap CLI flag, and this deprecates the --x-eio flag (since it is now the default behaviour). (saf-2271)
Add -k/ --hook flag to enable Semgrep scans via Claude Code Agent post-tool hooks (saf-2279)

Fixed

When running semgrep scan or semgrep ci, the progress bar now always ends at 100%. (SAF-2079)
Pro: fixed various bugs relating to Scala match expression handling in dataflow analysis (e.g., some branches being misordered, especially when matching multiple variables against non-integer literal patterns). (code-9144)
Semgrep will now emit better error messages when exceptions are raised at the beginning or end of scan (exit-message)
Enabled taint tracking into Goroutines, by treating them as regular Go function calls. (gh-11207)
Fixed missing Rust type alias translation. We can now accurately match the () type in a type declaration. (gh-11283)
fixed MCP semgrep_findings tool to accept single issue_type parameter and corrected identity string role parsing (saf-2282)

Open source →

1.142.031 Oct 20253 sources agree

Pro: improved taint handling of match expressions in Scala. In examples like `scala val x = taint match { case Some(t) => t case None => return "examp

1.142.0 - 2025-10-30

Added

Pro: improved taint handling of match expressions in Scala. In examples like
```
val x = taint match {
    case Some(t) => t
    case None => return "example"
}
```
dataflow should now track taint from taint to x. (code-9085)
pro: scala: http4s-specific support for case $M -> ... :? ... +& test +& ... => ... patterns. (code-9131)

Fixed

Supply Chain subproject resolution table is now shown even when no subprojects were successfully resolved (SC-2492)
UV lockfiles that include editable and local dependencies without versions are now parsed correctly. The unversioned dependencies will be ignored. (SC-2888)
Failures in parsing UV lockfiles are now correctly reported as "Failed" rather than "Unsupported" (SC-2895)
build.gradle.kts files now resolve correctly when --allow-local-builds is passed. (SC-2899)
Rule parsing in 1.139.0 was switched to happen solely in semgrep-core. This caused some users to exit with code 7, so this change has been reverted. (saf-2265)

Open source →

1.140.017 Oct 20253 sources agree

scala: Allow partial case patterns such as case 1 => ... to easily match individual case clauses within a match-expression. (code-9118)

1.140.0 - 2025-10-16

Added

scala: Allow partial case patterns such as case 1 => ... to easily match individual case clauses within a match-expression. (code-9118)
Added python 3.14 support. (gh-11250)
MCP: Slash command setup_semgrep_mcp now supports Claude Code. (saf-2261)

Changed

Semgrep's Docker image base has been bumped from Alpine Linux 3.21 to 3.22 (docker-version)

Fixed

Java and Rust: Fixed parsing of float and double literals with type suffixes so they can be used in metavariable-comparison and pattern matching. Previously, Java literals like 0.5f or 1.0d, and Rust literals like 0.5f32 or 1.0f64 would fail to parse and could not be compared. (gh-7968)
Display an error instead of a malformed success message when the show subcommand fails due to an invalid CLI token. (grow-630)
new semgrep/semgrep images should now contain golang v1.24 instead of v1.23 (saf-2240)
Fixed an issue where temporary files, containing rules to be validated, persisted after a semgrep scan. (saf-2257)
MCP: Fixed tool calls failing for some models (e.g., GPT-5). (saf-2262)
MCP: Fixed a bug where resource closure errors would occur when trying to use the MCP with the streamable-http tranport method. (saf-2264)

Open source →

1.139.01 Oct 20253 sources agree

--pro-intrafile scans will now add built-in taint propagators, like --pro does, hence producing extra findings. For example, in Java, list.add(taint)

1.139.0 - 2025-09-30

Added

--pro-intrafile scans will now add built-in taint propagators, like --pro does, hence producing extra findings. For example, in Java, list.add(taint) will now make list tainted even if the rule does not explicitly request that. Scan times should not be generally affected in a significant way. (code-9103)
Scala: Enable pattern { ... } to match partial functions like { case 1 => "1" }. (code-9106)
Associate Containerfiles with the dockerfile language (gh-11091)

Changed

Rule parsing now happens solely in OCaml. This should have no change in the behavior of whether a rule successfully parses or not, but will change the parse errors emitted (#4346, #4269, #4379) (gh-4379)
MCP: Removed the config parameter from the semgrep_scan tools, to prevent agents from inserting unwanted config files to scan with. (saf-2258)

Fixed

scala: Fixed matching of { case ... => ... } patterns. (code-9111)
Fixed a bug preventing metavariable-comparisons with more than two subsequent "and" or "or" conditions from producing findings. For example, the condition $X > 1 or $Y > 1 or $Z > 1 would previously always evaluate to false. Now, it will behave as expected. (gh-11209)
MCP: Fixed an issue where the semgrep_scan tool, when invoking the RPC-based scanning approach, would return JSON output not consistent with the CLI tool. (saf-2250)
MCP: The semgrep_findings tool now gives a suitable error message when erring due to insufficient permissions on standard semgrep login tokens. (saf-2254)
MCP: Fixed a bug where if the user is already logged in when running the setup flow, the Semgrep Pro Engine installation step would be ignored. (saf-2259)

Open source →

1.137.018 Sept 2025Deprecated

…That repository will be *deprecated* as of this release, and future MCP contributions / issues should go into this repo. (saf-2239)

1.137.0 - 2025-09-17

Added

pro: typescript: Improved name resolution for destructuring parameters. (code-9088)
Added a new semgrep mcp subcommand, which runs the Semgrep MCP server, which previously used to live at https://github.com/semgrep/mcp. That repository will be deprecated as of this release, and future MCP contributions / issues should go into this repo. (saf-2239)

Changed

Update semgrep-interfaces to only accept valid lanugage keys for editor (PR-4600)

Fixed

Fix incorrect interpretation of \# and \ in glob patterns found in Semgrepignore and included Gitignore files. (fix-glob-escape)
Removed pkg_resources is deprecated warning by bumping opentelemetry-* packages (gh-11069)
Fixes an issue in Dart language processing to return better results (gh-11173)

Open source →

Additional notes2 sources agree

Added

pro: typescript: Improved name resolution for destructuring parameters. (code-9088)
Added a new semgrep mcp subcommand, which runs the Semgrep MCP server, which previously used to live at https://github.com/semgrep/mcp. That repository will be deprecated as of this release, and future MCP contributions / issues should go into this repo. (saf-2239)

Changed

Update semgrep-interfaces to only accept valid lanugage keys for editor (PR-4600)
The minimum Python version for Semgrep is now 3.10. We are dropping support for Python 3.9.

Fixed

Fix incorrect interpretation of \# and \ in glob patterns found in Semgrepignore and included Gitignore files. (fix-glob-escape)
Removed pkg_resources is deprecated warning by bumping opentelemetry-* packages (gh-11069)
Fixes an issue in Dart language processing to return better results (gh-11173)

Open source →

semgrep

Release timeline

Releases

1.179.0 - 2026-10-01

### Added

### Changed

### Fixed

1.178.0 - 2026-09-23

### Changed

### Fixed

1.177.0 - 2026-09-10

### Added

### Changed

### Fixed

### Infra/Release Changes

1.176.0 - 2026-09-01

### Changed

### Fixed

1.175.0 - 2026-08-26

### Changed

### Known Issues

1.174.0 - 2026-08-20

### Added

### Changed

1.173.0 - 2026-08-12

### Added

### Changed

### Fixed

1.172.0 - 2026-07-28

### Added

### Changed

### Fixed

1.171.0 - 2026-07-22

### Added

### Changed

### Fixed

1.170.0 - 2026-07-15

### Added

### Changed

### Fixed

1.169.0 - 2026-07-08

### Infra/Release Changes

1.168.0 - 2026-06-24

### Added

### Changed

### Infra/Release Changes

1.167.0 - 2026-06-17

### Added

### Fixed

### Infra/Release Changes

1.166.0 - 2026-06-11

### Added

### Fixed

### Infra/Release Changes

1.165.0 - 2026-06-03

### Added

### Changed

### Fixed

1.164.0 - 2026-05-26

### Added

### Changed

### Fixed

### Infra/Release Changes

1.163.0 - 2026-05-13

### Added

### Changed

### Fixed

1.162.0 - 2026-05-07

### Added

### Changed

### Fixed

1.161.0 - 2026-04-22

### Added

### Fixed

1.160.0 - 2026-04-16

### Added

### Fixed

1.159.0 - 2026-04-10

### Fixed

1.158.0 - 2026-04-09