Week of July 20, 2026
- License compliance for multi-licensed packages: You can configure license compliance to block a dependency only when all of its licenses are blocked, instead of when any license is blocked.
Read the full release notes
Week of July 13, 2026
- Unified policies is generally available: Choose the rules and rulesets used for Semgrep scans and define what happens after Semgrep identifies a finding, such as leaving PR or MR comments, blocking PRs or MRs, creating Jira tickets, or sending Slack notifications.
Read the full release notes
Week of July 6, 2026
- Archive projects in Semgrep: You can archive a project from Project settings. Projects archived in Semgrep appear on an Archived tab with an archived badge, alongside projects archived in your source code manager.
- Vulnerability class conditions: Remediation policy automations can now be scoped to a vulnerability class such as SQL Injection or Path Traversal.