chore(deps-dev): bump semgrep from 1.84.1 to 1.85.0

[dependabot]

Bumps semgrep from 1.84.1 to 1.85.0.

Release notes

Sourced from semgrep's releases.

Release v1.85.0

1.85.0 - 2024-08-15

Added

• Semgrep now recognizes files ending with the extention .tfvars as terraform files (saf-1481)

Changed

• The use of --debug will not generate anymore profiling information. Use --time instead. (debug)
• Updated link to the Supply Chain findings page on Semgrep AppSec Platform to filter to the specific repository and ref the findings are detected on. (secw-2395)

Fixed

• Fixed an error with julia list comprehentions where the pattern:

  [$A for $B in $C]
  

  would match

  [x for y in z]

  However we would only get one binding [$A/x]

  Behavior after fix: we get three bindings [$A/x,$B/y,$C/z] (saf-1480)

Changelog

Sourced from semgrep's changelog.

1.85.0 - 2024-08-15

Added

• Semgrep now recognizes files ending with the extention .tfvars as terraform files (saf-1481)

Changed

• The use of --debug will not generate anymore profiling information. Use --time instead. (debug)
• Updated link to the Supply Chain findings page on Semgrep AppSec Platform to filter to the specific repository and ref the findings are detected on. (secw-2395)

Fixed

• Fixed an error with julia list comprehentions where the pattern:

  [$A for $B in $C]
  

  would match

  [x for y in z]

  However we would only get one binding [$A/x]

  Behavior after fix: we get three bindings [$A/x,$B/y,$C/z] (saf-1480)

Commits

• 2490e33 chore: Bump version to 1.85.0
• cf04235 Read event name from env var in managed scanning (semgrep/semgrep-proprietary...
• 1ad70b2 Do not profile rules anymore when using --debug (semgrep/semgrep-proprietary#...
• 98de3d1 fix(julia): [... for ... in ...] comprehension metavariable bindings (semgr...
• 6d0885esemgrep/semgrep-proprietary#2008
• 1bc14ffsemgrep/semgrep-proprietary#2012
• caf2b87 feat: add the number of bytes of a file to traces (semgrep/semgrep-proprietar...
• 26a3540 feat(interfaces): process files w/extension .tfvars as terraform files (sem...
• b013879semgrep/semgrep-proprietary#2009
• 0e8fd31semgrep/semgrep-proprietary#2005
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[mergify]

Merge Protections

Your pull request matches the following merge protections and will not be merged until they are valid.

Changelog requirements

• repository-name != mergify-shadow-office
• any of:
  • -title ~= ^feat
  • label = need changelog
  • label = skip changelog

Enforce conventional commit

Make sure that we follow https://www.conventionalcommits.org/en/v1.0.0/

• title ~= ^(fix|feat|docs|style|refactor|perf|test|build|ci|chore|revert)(?:(.+))?: