v1.165.0
Release v1.165.0
Added 1
- Added `--max-match-context-size` option to limit the number of characters of source code included as context for each match in the output, with a default value of 0 for unlimited
Changed 2
- Replaced `--x-no-python-schema-validation` with a value-taking `--x-rule-validation=full|core-only|none` flag, where `full` is the default and preserves existing Python rule validation behavior
- Updated Python grammar
Fixed 2
- Added bit shift operations to metavar comparison in addition to standard arithmetic operators and logical bit ops
- Reduce intermittent `validation_error` results on HTTP secret validators by retrying transient network failures
1.165.0 - 2026-06-03
### Added
- Added
--max-match-context-sizeoption to limit the number of characters of source code included as context for each match in the output. This prevents matches in minified files (e.g., minified JavaScript where the entire file is a single line) from producing enormous output Set to 0 for unlimited, which is the default value. (ENGINE-2117)
### Changed
- Replaced
--x-no-python-schema-validationwith a value-taking--x-rule-validation=full|core-only|noneflag. The default (full) preserves existing Python rule validation behavior;core-onlymatches the old flag's semantics (disables Python rule validation and uses semgrep-core RPC validation only);noneskips both pre-validation passes, surfacing rule errors at scan-time.--x-no-python-schema-validationis still accepted as a no-op with a deprecation warning, and will be removed in a future release. (x-rule-validation) - Python: Updated Python grammar (LANG-201)
### Fixed
- Added bit shift operations to metavar comparison in addition to already present standard arithmetic operators and logical bit ops. (ENGINE-2448)
- Reduce intermittent
validation_errorresults on HTTP secret validators (Facebook, Slack, Stripe, Google, Cloudflare, etc.) by retrying transient network failures, mirroring the retry behavior already present for AWS validators. (SCRT-965)