Opengrep v1.26.0 released

Opengrep is the community-driven fork of Semgrep, born after Semgrep moved key scanning capabilities behind a commercial license. It’s an open-source SAST engine with inter-procedural and cross-file analysis, SARIF/JSON output included.

Version v1.26.0 is out with Dart taint-intrafile support, JS/TS and Elixir translation fixes, and infrastructure upgrades including OCaml 5.5.0.

Infrastructure:
- Fix Pipfile package name and skip deleting the join_rule temp file on Windows
- Upgrade ppxlib to 0.38 and cmdliner to 2.x
- Bump OCaml to 5.5.0

Improvements:
- Dart: Add support for taint-intrafile
- JS/TS: Various fixes in translation to AST
- Elixir: Make conditions' side effects visible in other branches of cond expressions
- PHP: shorthand for array_push now propagates taint
- JS/TS: Fix the matching on ellipsis metavariable
- Matching: Match statement-sequence patterns against every class member

Contributors: corneliuhoffman, maciejpirog, mitchellspangler, dimitris-m

Full release notes: github.com/opengrep/opengrep/releases/tag/v1.26.0

• News
• Tools