All notable changes to the "semgrep-vscode" extension will be documented in this file.
The format is based on Keep a Changelog, and this project adheres to Semantic Versioning.
- New sidebar section with support information (email and slack contact; documentation)
- Semgrep binaries are now included in the extension, so Semgrep does not need to be installed to use the extension
- Updated README
- Semgrep JS version bumped
- Updated README
- Extension will now log to a temporary file, and will properly handle LS telemetry events
- Extension no longer errors out if a log can't be written
- If telemetry is enabled, the extension will now send crash reports of the Semgrep process, along with errors in the extension
- The extension now pings semgrep.dev to check the latest CLI version
- Bumped LSP.js to 1.71.0
- Reworked the Semgrep Search UI to be more modern, performant, and expressive!
Features include:
- ability to specify multiple patterns to match / not match
- file-path includes/excluding
- semantic autofix (individual and mass)
- match previews
- language-specific and language-agnostic search
- streaming search
- Scan workspace commands will now toggle "Only Git Dirty" before scanning
- Updated README
- Bumped LSP.js version
- Fixed LSP.js versioning
- Heap size setting for LSP.js
- Added LSP.js support, so Semgrep VSCode supports Windows without WSL
- Added
Semgrep: Restart Language Servercommand, to restart language server - Users can now enable AST Hover, which allows showing AST nodes when hovering parts of code
- Diagnostic information should now be properly rendered in markdown
- Semgrep Language Server will now respect environment variables
- Fixed some typos and stuff
- Added extension walkthrough
- Updated README
- Users will now be prompted to scan full workspace on new installs
- Extension is now bundled through esbuild
- Users can now search by Semgrep patterns
- Language Server rewritten in OCaml, deprecating some previous settings and commands
- Changelog past this point is for the previous beta version, much of which has changed
- Updated Semgrep logo
- You can now set multiple config values separated by commas. Thank you Ryan Scott Brown!
- Clarified installation instructions
- Removed unimplemented autofix command from command palette
- Enable scanning on TypeScript React (.tsx), TypeScript (.ts), and PHP files by default.
- Enable scanning on JavaScript React (.jsx) files by default. Semgrep 0.20.0 had just been released with support for JSX tag metavariables.
- Stop requiring the latest version of VS Code. Support is now for 1.31.0 and above.
Initial release