Niels Lohmann b23797aeac ci: pin the Semgrep version without hashes ...

Keep a single "semgrep==" line so Dependabot bumps Semgrep itself, but
let pip resolve its transitive dependencies instead of locking them by
hash.

Signed-off-by: Niels Lohmann <mail@nlohmann.me>

2026-11-11 10:51:15 +01:00

..

cancel_closed_pr_runs.yml

build(deps): bump step-security/harden-runner from 2.22.2 to 2.22.3 (#6021)

2026-11-03 19:17:27 +01:00

check_amalgamation.yml

ci: install the remaining pip dependencies with --require-hashes (#6050)

2026-11-10 08:33:30 +01:00

check_docs_links.yml

build(deps): bump step-security/harden-runner from 2.22.2 to 2.22.3 (#6021)

2026-11-03 19:17:27 +01:00

cifuzz.yml

build(deps): bump step-security/harden-runner from 2.22.2 to 2.22.3 (#6021)

2026-11-03 19:17:27 +01:00

codeql-analysis.yml

build(deps): bump the codeql-action group with 3 updates (#6056)

2026-11-10 21:44:46 +01:00

comment_check_amalgamation.yml

build(deps): bump step-security/harden-runner from 2.22.2 to 2.22.3 (#6021)

2026-11-03 19:17:27 +01:00

dependency-review.yml

build(deps): bump step-security/harden-runner from 2.22.2 to 2.22.3 (#6021)

2026-11-03 19:17:27 +01:00

flawfinder.yml

build(deps): bump the codeql-action group with 3 updates (#6056)

2026-11-10 21:44:46 +01:00

json_view_benchmarks.yml

build(deps): bump step-security/harden-runner from 2.22.2 to 2.22.3 (#6021)

2026-11-03 19:17:27 +01:00

labeler.yml

build(deps): bump step-security/harden-runner from 2.22.2 to 2.22.3 (#6021)

2026-11-03 19:17:27 +01:00

macos.yml

Fix the standalone release tarball; update compiler list and CITATION (#5734)

2026-10-06 22:40:10 +02:00

publish_documentation.yml

build(deps): bump step-security/harden-runner from 2.22.2 to 2.22.3 (#6021)

2026-11-03 19:17:27 +01:00

scorecards.yml

build(deps): bump the codeql-action group with 3 updates (#6056)

2026-11-10 21:44:46 +01:00

semgrep.yml

ci: pin the Semgrep version without hashes

2026-11-11 10:51:15 +01:00

stale.yml

build(deps): bump step-security/harden-runner from 2.22.2 to 2.22.3 (#6021)

2026-11-03 19:17:27 +01:00

ubuntu.yml

ci: pin pip dependencies by hash (#6046)

2026-11-10 07:08:25 +01:00

windows.yml

build(deps): bump lukka/get-cmake from 4.4.4 to 4.4.5 (#6024)

2026-11-04 23:38:57 +01:00