Merge Develop into Release - #4032
Open
r2c-argo[bot] wants to merge 7 commits into
Open
Conversation
…sable workflow) [SEC-2479] The merged migration pointed pre-commit at the shared semgrep/release-workflows reusable workflow, but this is a public repo and GitHub blocks public repos from calling reusable workflows in an internal repo — so pre-commit has been failing to start on develop. Inline the exact pinned steps the reusable workflow runs (checkout + setup-uv + cache + `uv tool install pre-commit --with pre-commit-uv` + pre-commit run), all SHA-pinned. This removes pre-commit/action and fixes develop. Preserves SKIP=yamlfmt; honors .python-version (3.10). Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Updated pre-commit workflow to remove comments about reusable workflows.
…nary precedence The updated Solidity tree-sitter grammar correctly parses `cond ? x : y.div(z)` as `cond ? x : (y.div(z))` (member access binds tighter than the ternary operator). The basic-oracle-manipulation finding now points at the actual `.div` call line rather than the start of the enclosing ternary, so move the `ruleid` annotation to the corrected line. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
…ion-solidity-line fix: Solidity move basic-oracle-manipulation test annotation to the matched line (relates to semgrep-proprietary PR #6563
ci: inline SHA-pinned pre-commit (fix broken reusable-workflow call) [SEC-2479]
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Created automatically with the Argo bot using the Argo workflow template in workflows/release-rule-changes/release-workflow-template.yaml