From 62933970b24a51727786030327e9118c1b24fcf7 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Sat, 19 Sep 2026 17:13:12 +0000 Subject: [PATCH] chore(deps): bump semgrep from 1.176.1 to 1.177.0 Bumps [semgrep](https://github.com/semgrep/semgrep) from 1.176.1 to 1.177.0. - [Release notes](https://github.com/semgrep/semgrep/releases) - [Changelog](https://github.com/semgrep/semgrep/blob/v1.177.0/CHANGELOG.md) - [Commits](https://github.com/semgrep/semgrep/commits/v1.177.0) --- updated-dependencies: - dependency-name: semgrep dependency-version: 1.177.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] --- requirements-scan.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/requirements-scan.txt b/requirements-scan.txt index de1ea60..f47d71f 100644 --- a/requirements-scan.txt +++ b/requirements-scan.txt @@ -41,7 +41,7 @@ # and vendoring is not open to us - the Semgrep Rules License permits use for our # own purposes and forbids redistributing the rules, which is what putting them in # a public repository would be. -semgrep==1.176.1; sys_platform != "win32" +semgrep==1.177.0; sys_platform != "win32" # The weekly audit of what we PIN. Not the same question as dependency-review, # which looks at what a pull request ADDS: this one asks whether an advisory has