Semgrep v1.161.0: Scala Parsing & Logging Improvements

TL;DR #

• Enhanced Scala 3.4+ trait parameter parsing.
• HTTP request URLs now logged only at debug level.
• Minor update focusing on language support and logging clarity.

Key Changes #

Semgrep v1.161.0, released on April 22, 2026, brings targeted improvements to the static analysis tool. This minor update focuses on refining language support and internal logging mechanisms. For full details, refer to the Semgrep v1.161.0 release notes.

• Language Support: The parser now correctly handles Scala 3.4+ trait parameters. This ensures more accurate static analysis for projects utilizing newer Scala features.
• Internal Logging: Semgrep’s HTTP requests will no longer log full URLs above the debug level. This change reduces log verbosity for standard operations, while detailed request information remains accessible by setting SEMGREP_LOG_SRCS=cohttp.client.

Impact for QA Teams #

QA engineers working with Scala 3.4+ projects will benefit from more precise static analysis results, reducing false positives or missed issues related to trait parameters. The refined HTTP logging streamlines debugging Semgrep’s internal operations, making log analysis clearer during tool integration or troubleshooting.