# Semgrep v1.166.0 — Release v1.166.0

- Product: Semgrep (https://whatsnew.fyi/product/semgrep)
- Vendor: Semgrep, Inc.
- Date: 2026-06-11
- Version: v1.166.0
- Original notes: https://github.com/semgrep/semgrep/releases/tag/v1.166.0
- Permalink: https://whatsnew.fyi/product/semgrep/releases/v1.166.0

What's New is an index, not a publisher: every entry below links to the vendor's own release notes, which are the authoritative source. Entries are labelled where they are hand-curated sample data, pre-releases, or drawn from a secondary source such as a developer blog.

Reuse: the summaries, labels and curation here are © What's New. Quote freely with attribution and a link back; wholesale republication of the corpus is not permitted — terms: https://whatsnew.fyi/terms. The vendors' own release notes remain their publishers'.

---

- **added** — Added experimental cross-file (interfile) analysis for Gosu, enabling taint tracking across multiple Gosu source files
- **added** — Added support for more operators for folding for constant propagation, including subtraction, division, bit ops, bit shifts, comparisons, and more
- **fixed** — Fixed parsing of integer literals with an underscore immediately after the radix prefix
- **fixed** — Python parsing now preserves type parameters on def and class definitions
- **fixed** — Semgrep no longer stores the API token in ~/.semgrep/settings.yml's stored token when the current scan's token is supplied via the SEMGREP_APP_TOKEN envvar
- **fixed** — semgrep ci scans originating from a pre-commit hook will no longer fail with 'Unable to create '<tmp>/.git/index.lock': Not a directory' in certain cases

##### [1.166.0](https://github.com/semgrep/semgrep/releases/tag/v1.166.0) - 2026-06-11

###### ### Added

- Pro: Added experimental cross-file (interfile) analysis for Gosu, enabling taint tracking across multiple Gosu source files. (gosu-interfile)
- Added support for more operators for folding for constant propagation, including subtraction, division, bit ops, bit shifts, comparisons, and more (ENGINE-2789)

###### ### Fixed

- Fixed parsing of integer literals with an underscore immediately after the radix prefix (e.g. `0x_dead_beef`, `0o_755`, `0b_1010_1010`). (LANG-533)
- Python parsing now preserves type parameters on `def` and `class` definitions. (LANG-536)
- Semgrep no longer stores the API token in  `~/.semgrep/settings.yml`'s stored
  token when the current scan's token is supplied via the `SEMGREP_APP_TOKEN`
  envvar. (SEC-2240)
- `semgrep ci` scans originating from a pre-commit hook will no longer fail with
  `Unable to create '<tmp>/.git/index.lock': Not a directory` in certain cases. (engine-2736)

###### ### Infra/Release Changes

- Added parsing tests covering Python language features (Python 3.0–3.12). (LANG-531)