Niels Lohmann 66452227ac ci: install Semgrep without hash pinning ...

The hash-pinned requirements-semgrep.txt kept breaking: Semgrep pins its
own dependencies to exact or compatible-release versions, so Dependabot
bumps of any of them (importlib-metadata, exceptiongroup, jsonschema,
peewee, wcmatch, wrapt, ...) made the job fail with ResolutionImpossible.
Install the latest Semgrep with pip instead, remove the lock file and the
Dependabot ignore list that tried to work around it.

Signed-off-by: Niels Lohmann <mail@nlohmann.me>

2026-11-11 10:48:38 +01:00

..

external_ci

Split the Visual Studio 2019 AppVeyor job into two shards (#5872)

2026-10-21 16:25:04 +02:00

ISSUE_TEMPLATE

Clean up non-code files (#5801)

2026-10-11 08:21:51 +02:00

workflows

ci: install Semgrep without hash pinning

2026-11-11 10:48:38 +01:00

CODE_OF_CONDUCT.md

Clean up and document project files (#4560)

2025-01-17 06:53:35 +01:00

CODEOWNERS

Clean up non-code files (#5801)

2026-10-11 08:21:51 +02:00

config.yml

Overwork project infrastructure (#5218)

2026-06-30 18:09:06 +02:00

CONTRIBUTING.md

Clean up non-code files (#5801)

2026-10-11 08:21:51 +02:00

dependabot.yml

ci: install Semgrep without hash pinning

2026-11-11 10:48:38 +01:00

FUNDING.yml

Clean up and document project files (#4560)

2025-01-17 06:53:35 +01:00

labeler.yml

Compare json_view with yyjson, simdjson, and Boost.JSON (#5627)

2026-10-22 08:40:33 +02:00

PULL_REQUEST_TEMPLATE.md

Check the fuzzers' UBJSON/BJData round-trip invariants in the unit tests (#5569)

2026-09-25 08:29:02 +02:00

SECURITY.md

Document response times, supported versions, access, secrets, and dependency policies (#5580)

2026-09-25 20:34:58 +02:00