Update GitHub Action returntocorp/semgrep to v1.171.0

[hash-worker]

This PR contains the following updates:

Package	Type	Update	Change	Pending
returntocorp/semgrep	container	minor	1.151.0 → 1.171.0	1.172.0

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • "before 2am on saturday"
• Automerge
  • "before 4am every weekday,every weekend"

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
hash	Ready	Preview	Aug 5, 2026 11:43pm
hashdotdesign-tokens	Ready	Preview	Aug 5, 2026 11:43pm
petrinaut	Ready	Preview	Aug 5, 2026 11:43pm

[cursor]

PR Summary

Low Risk
Routine dependency bump in CI only; no application runtime or security-sensitive logic changes.

Overview
Bumps the Semgrep GitHub Actions job container from 1.151.0 to 1.171.0, including an updated digest pin in .github/workflows/semgrep.yml. The workflow steps (semgrep ci, SARIF upload) are unchanged; only the scanner image version moves forward.

^{Reviewed by Cursor Bugbot for commit 67b6350. Bugbot is set up for automated code reviews on this repo. Configure here.}

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 59.57%. Comparing base (ac5ec9c) to head (67b6350).
⚠️ Report is 8 commits behind head on main.

Additional details and impacted files

@@           Coverage Diff           @@
##             main    #9134   +/-   ##
=======================================
  Coverage   59.57%   59.57%           
=======================================
  Files        1413     1413           
  Lines      138053   138053           
  Branches     6510     6510           
=======================================
+ Hits        82240    82241    +1     
+ Misses      54771    54770    -1     
  Partials     1042     1042           

Flag	Coverage Δ
apps.hash-ai-worker-ts	1.99% <ø> (ø)
apps.hash-api	12.56% <ø> (ø)
blockprotocol.type-system	40.84% <ø> (ø)
local.claude-hooks	0.00% <ø> (ø)
local.harpc-client	51.49% <ø> (ø)
local.hash-backend-utils	3.27% <ø> (ø)
local.hash-graph-sdk	10.02% <ø> (ø)
local.hash-isomorphic-utils	12.25% <ø> (ø)
rust.antsi	2.36% <ø> (ø)
rust.error-stack	90.81% <ø> (ø)
rust.harpc-codec	84.70% <ø> (ø)
rust.harpc-net	96.21% <ø> (+0.01%)	⬆️
rust.harpc-tower	67.03% <ø> (ø)
rust.harpc-types	0.00% <ø> (ø)
rust.harpc-wire-protocol	92.23% <ø> (ø)
rust.hash-codec	72.76% <ø> (ø)
rust.hash-graph-api	7.36% <ø> (ø)
rust.hash-graph-authorization	62.59% <ø> (ø)
rust.hash-graph-embeddings	91.88% <ø> (ø)
rust.hash-graph-postgres-store	29.66% <ø> (ø)
rust.hash-graph-store	42.16% <ø> (ø)
rust.hash-graph-temporal-versioning	47.95% <ø> (ø)
rust.hash-graph-types	0.00% <ø> (ø)
rust.hash-graph-validation	84.71% <ø> (ø)
rust.hashql-ast	89.63% <ø> (ø)
rust.hashql-compiletest	28.39% <ø> (ø)
rust.hashql-core	78.98% <ø> (ø)
rust.hashql-diagnostics	72.51% <ø> (ø)
rust.hashql-eval	79.82% <ø> (ø)
rust.hashql-hir	89.09% <ø> (ø)
rust.hashql-mir	87.92% <ø> (ø)
rust.hashql-syntax-jexpr	94.04% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

[codspeed-hq]

Merging this PR will degrade performance by 15.38%

⚠️ Different runtime environments detected

Some benchmarks with significant performance changes were compared across different runtime environments,
which may affect the accuracy of the results.

Open the report in CodSpeed to investigate

❌ 2 regressed benchmarks
✅ 96 untouched benchmarks

Warning

Please fix the performance issues or acknowledge them on CodSpeed.

Performance Changes

	Benchmark	BASE	HEAD	Efficiency
❌	bit_matrix/dense/iter_row[64]	140.8 ns	170 ns	-17.16%
❌	bit_matrix/dense/iter_row[200]	185.8 ns	215 ns	-13.57%

Tip

Investigate this regression by commenting @codspeedbot fix this regression on this PR, or directly use the CodSpeed MCP with your agent.

---

_{Comparing deps/gha/returntocorp-semgrep-1.x (67b6350) with main (2d99645)¹}

Footnotes

1. No successful run was found on main (b13818b) during the generation of this report, so 2d99645 was used instead as the comparison base. There might be some changes unrelated to this pull request in this report. ↩

[github-actions]

Benchmark results

@rust/hash-graph-benches – Integrations

policy_resolution_large

Function	Value	Mean	Flame graphs
resolve_policies_for_actor	user: empty, selectivity: high, policies: 2002	$$27.5 \mathrm{ms} \pm 222 \mathrm{μs}\left({\color{gray}-1.342 \mathrm{\%}}\right) $$	Flame Graph
resolve_policies_for_actor	user: empty, selectivity: low, policies: 1	$$3.44 \mathrm{ms} \pm 20.9 \mathrm{μs}\left({\color{gray}-0.433 \mathrm{\%}}\right) $$	Flame Graph
resolve_policies_for_actor	user: empty, selectivity: medium, policies: 1002	$$13.1 \mathrm{ms} \pm 130 \mathrm{μs}\left({\color{gray}2.74 \mathrm{\%}}\right) $$	Flame Graph
resolve_policies_for_actor	user: seeded, selectivity: high, policies: 3314	$$43.3 \mathrm{ms} \pm 497 \mathrm{μs}\left({\color{gray}0.323 \mathrm{\%}}\right) $$	Flame Graph
resolve_policies_for_actor	user: seeded, selectivity: low, policies: 1	$$14.2 \mathrm{ms} \pm 127 \mathrm{μs}\left({\color{gray}0.631 \mathrm{\%}}\right) $$	Flame Graph
resolve_policies_for_actor	user: seeded, selectivity: medium, policies: 1527	$$24.3 \mathrm{ms} \pm 195 \mathrm{μs}\left({\color{gray}-1.615 \mathrm{\%}}\right) $$	Flame Graph
resolve_policies_for_actor	user: system, selectivity: high, policies: 2078	$$28.3 \mathrm{ms} \pm 153 \mathrm{μs}\left({\color{gray}-1.226 \mathrm{\%}}\right) $$	Flame Graph
resolve_policies_for_actor	user: system, selectivity: low, policies: 1	$$3.72 \mathrm{ms} \pm 26.2 \mathrm{μs}\left({\color{gray}-0.674 \mathrm{\%}}\right) $$	Flame Graph
resolve_policies_for_actor	user: system, selectivity: medium, policies: 1033	$$13.8 \mathrm{ms} \pm 111 \mathrm{μs}\left({\color{gray}-0.908 \mathrm{\%}}\right) $$	Flame Graph

policy_resolution_medium

Function	Value	Mean	Flame graphs
resolve_policies_for_actor	user: empty, selectivity: high, policies: 102	$$3.78 \mathrm{ms} \pm 20.8 \mathrm{μs}\left({\color{gray}-0.810 \mathrm{\%}}\right) $$	Flame Graph
resolve_policies_for_actor	user: empty, selectivity: low, policies: 1	$$3.00 \mathrm{ms} \pm 23.1 \mathrm{μs}\left({\color{gray}0.169 \mathrm{\%}}\right) $$	Flame Graph
resolve_policies_for_actor	user: empty, selectivity: medium, policies: 52	$$3.38 \mathrm{ms} \pm 19.6 \mathrm{μs}\left({\color{gray}0.171 \mathrm{\%}}\right) $$	Flame Graph
resolve_policies_for_actor	user: seeded, selectivity: high, policies: 269	$$5.15 \mathrm{ms} \pm 33.2 \mathrm{μs}\left({\color{gray}-1.812 \mathrm{\%}}\right) $$	Flame Graph
resolve_policies_for_actor	user: seeded, selectivity: low, policies: 1	$$3.55 \mathrm{ms} \pm 27.5 \mathrm{μs}\left({\color{gray}-0.408 \mathrm{\%}}\right) $$	Flame Graph
resolve_policies_for_actor	user: seeded, selectivity: medium, policies: 108	$$4.10 \mathrm{ms} \pm 26.8 \mathrm{μs}\left({\color{gray}-0.985 \mathrm{\%}}\right) $$	Flame Graph
resolve_policies_for_actor	user: system, selectivity: high, policies: 133	$$4.42 \mathrm{ms} \pm 31.7 \mathrm{μs}\left({\color{gray}0.079 \mathrm{\%}}\right) $$	Flame Graph
resolve_policies_for_actor	user: system, selectivity: low, policies: 1	$$3.42 \mathrm{ms} \pm 18.6 \mathrm{μs}\left({\color{gray}-0.967 \mathrm{\%}}\right) $$	Flame Graph
resolve_policies_for_actor	user: system, selectivity: medium, policies: 63	$$4.10 \mathrm{ms} \pm 24.8 \mathrm{μs}\left({\color{gray}0.043 \mathrm{\%}}\right) $$	Flame Graph

policy_resolution_none

Function	Value	Mean	Flame graphs
resolve_policies_for_actor	user: empty, selectivity: high, policies: 2	$$2.68 \mathrm{ms} \pm 19.1 \mathrm{μs}\left({\color{gray}3.45 \mathrm{\%}}\right) $$	Flame Graph
resolve_policies_for_actor	user: empty, selectivity: low, policies: 1	$$2.51 \mathrm{ms} \pm 14.5 \mathrm{μs}\left({\color{gray}0.301 \mathrm{\%}}\right) $$	Flame Graph
resolve_policies_for_actor	user: empty, selectivity: medium, policies: 2	$$2.65 \mathrm{ms} \pm 15.8 \mathrm{μs}\left({\color{gray}2.82 \mathrm{\%}}\right) $$	Flame Graph
resolve_policies_for_actor	user: system, selectivity: high, policies: 8	$$2.92 \mathrm{ms} \pm 15.2 \mathrm{μs}\left({\color{gray}2.49 \mathrm{\%}}\right) $$	Flame Graph
resolve_policies_for_actor	user: system, selectivity: low, policies: 1	$$2.72 \mathrm{ms} \pm 19.5 \mathrm{μs}\left({\color{gray}3.28 \mathrm{\%}}\right) $$	Flame Graph
resolve_policies_for_actor	user: system, selectivity: medium, policies: 3	$$2.93 \mathrm{ms} \pm 18.8 \mathrm{μs}\left({\color{gray}3.05 \mathrm{\%}}\right) $$	Flame Graph

policy_resolution_small

Function	Value	Mean	Flame graphs
resolve_policies_for_actor	user: empty, selectivity: high, policies: 52	$$3.03 \mathrm{ms} \pm 19.2 \mathrm{μs}\left({\color{gray}-0.736 \mathrm{\%}}\right) $$	Flame Graph
resolve_policies_for_actor	user: empty, selectivity: low, policies: 1	$$2.74 \mathrm{ms} \pm 16.8 \mathrm{μs}\left({\color{gray}0.424 \mathrm{\%}}\right) $$	Flame Graph
resolve_policies_for_actor	user: empty, selectivity: medium, policies: 26	$$3.00 \mathrm{ms} \pm 23.7 \mathrm{μs}\left({\color{gray}1.06 \mathrm{\%}}\right) $$	Flame Graph
resolve_policies_for_actor	user: seeded, selectivity: high, policies: 94	$$3.42 \mathrm{ms} \pm 22.6 \mathrm{μs}\left({\color{gray}-0.490 \mathrm{\%}}\right) $$	Flame Graph
resolve_policies_for_actor	user: seeded, selectivity: low, policies: 1	$$2.96 \mathrm{ms} \pm 22.9 \mathrm{μs}\left({\color{gray}-1.603 \mathrm{\%}}\right) $$	Flame Graph
resolve_policies_for_actor	user: seeded, selectivity: medium, policies: 27	$$3.26 \mathrm{ms} \pm 15.4 \mathrm{μs}\left({\color{gray}-0.328 \mathrm{\%}}\right) $$	Flame Graph
resolve_policies_for_actor	user: system, selectivity: high, policies: 66	$$3.40 \mathrm{ms} \pm 24.7 \mathrm{μs}\left({\color{gray}-0.137 \mathrm{\%}}\right) $$	Flame Graph
resolve_policies_for_actor	user: system, selectivity: low, policies: 1	$$2.91 \mathrm{ms} \pm 15.1 \mathrm{μs}\left({\color{gray}-1.803 \mathrm{\%}}\right) $$	Flame Graph
resolve_policies_for_actor	user: system, selectivity: medium, policies: 29	$$3.29 \mathrm{ms} \pm 20.2 \mathrm{μs}\left({\color{gray}-1.885 \mathrm{\%}}\right) $$	Flame Graph

read_scaling_complete

Function	Value	Mean	Flame graphs
entity_by_id;one_depth	1 entities	$$33.5 \mathrm{ms} \pm 233 \mathrm{μs}\left({\color{lightgreen}-21.245 \mathrm{\%}}\right) $$	Flame Graph
entity_by_id;one_depth	10 entities	$$32.9 \mathrm{ms} \pm 223 \mathrm{μs}\left({\color{gray}-2.385 \mathrm{\%}}\right) $$	Flame Graph
entity_by_id;one_depth	25 entities	$$36.0 \mathrm{ms} \pm 228 \mathrm{μs}\left({\color{gray}0.635 \mathrm{\%}}\right) $$	Flame Graph
entity_by_id;one_depth	5 entities	$$33.2 \mathrm{ms} \pm 257 \mathrm{μs}\left({\color{gray}4.38 \mathrm{\%}}\right) $$	Flame Graph
entity_by_id;one_depth	50 entities	$$41.7 \mathrm{ms} \pm 245 \mathrm{μs}\left({\color{gray}-1.259 \mathrm{\%}}\right) $$	Flame Graph
entity_by_id;two_depth	1 entities	$$35.6 \mathrm{ms} \pm 212 \mathrm{μs}\left({\color{lightgreen}-28.340 \mathrm{\%}}\right) $$	Flame Graph
entity_by_id;two_depth	10 entities	$$40.6 \mathrm{ms} \pm 196 \mathrm{μs}\left({\color{gray}1.21 \mathrm{\%}}\right) $$	Flame Graph
entity_by_id;two_depth	25 entities	$$92.4 \mathrm{ms} \pm 631 \mathrm{μs}\left({\color{gray}2.45 \mathrm{\%}}\right) $$	Flame Graph
entity_by_id;two_depth	5 entities	$$34.1 \mathrm{ms} \pm 220 \mathrm{μs}\left({\color{gray}-0.630 \mathrm{\%}}\right) $$	Flame Graph
entity_by_id;two_depth	50 entities	$$301 \mathrm{ms} \pm 852 \mathrm{μs}\left({\color{red}18.4 \mathrm{\%}}\right) $$	Flame Graph
entity_by_id;zero_depth	1 entities	$$10.9 \mathrm{ms} \pm 84.4 \mathrm{μs}\left({\color{gray}-0.337 \mathrm{\%}}\right) $$	Flame Graph
entity_by_id;zero_depth	10 entities	$$11.0 \mathrm{ms} \pm 64.4 \mathrm{μs}\left({\color{gray}-0.013 \mathrm{\%}}\right) $$	Flame Graph
entity_by_id;zero_depth	25 entities	$$11.3 \mathrm{ms} \pm 138 \mathrm{μs}\left({\color{gray}2.72 \mathrm{\%}}\right) $$	Flame Graph
entity_by_id;zero_depth	5 entities	$$11.0 \mathrm{ms} \pm 72.2 \mathrm{μs}\left({\color{gray}-0.846 \mathrm{\%}}\right) $$	Flame Graph
entity_by_id;zero_depth	50 entities	$$11.1 \mathrm{ms} \pm 69.3 \mathrm{μs}\left({\color{gray}1.17 \mathrm{\%}}\right) $$	Flame Graph

read_scaling_linkless

Function	Value	Mean	Flame graphs
entity_by_id	1 entities	$$11.0 \mathrm{ms} \pm 64.0 \mathrm{μs}\left({\color{gray}0.837 \mathrm{\%}}\right) $$	Flame Graph
entity_by_id	10 entities	$$11.0 \mathrm{ms} \pm 65.1 \mathrm{μs}\left({\color{gray}-0.213 \mathrm{\%}}\right) $$	Flame Graph
entity_by_id	100 entities	$$11.1 \mathrm{ms} \pm 70.3 \mathrm{μs}\left({\color{gray}0.763 \mathrm{\%}}\right) $$	Flame Graph
entity_by_id	1000 entities	$$11.0 \mathrm{ms} \pm 60.7 \mathrm{μs}\left({\color{gray}-1.015 \mathrm{\%}}\right) $$	Flame Graph
entity_by_id	10000 entities	$$11.4 \mathrm{ms} \pm 75.0 \mathrm{μs}\left({\color{gray}-0.273 \mathrm{\%}}\right) $$	Flame Graph

representative_read_entity

Function	Value	Mean	Flame graphs
entity_by_id	entity type ID: https://blockprotocol.org/@alice/types/entity-type/block/v/1	$$11.5 \mathrm{ms} \pm 82.5 \mathrm{μs}\left({\color{gray}0.916 \mathrm{\%}}\right) $$	Flame Graph
entity_by_id	entity type ID: https://blockprotocol.org/@alice/types/entity-type/book/v/1	$$11.5 \mathrm{ms} \pm 62.1 \mathrm{μs}\left({\color{gray}-0.057 \mathrm{\%}}\right) $$	Flame Graph
entity_by_id	entity type ID: https://blockprotocol.org/@alice/types/entity-type/building/v/1	$$11.5 \mathrm{ms} \pm 71.1 \mathrm{μs}\left({\color{gray}1.36 \mathrm{\%}}\right) $$	Flame Graph
entity_by_id	entity type ID: https://blockprotocol.org/@alice/types/entity-type/organization/v/1	$$11.6 \mathrm{ms} \pm 99.5 \mathrm{μs}\left({\color{gray}-1.135 \mathrm{\%}}\right) $$	Flame Graph
entity_by_id	entity type ID: https://blockprotocol.org/@alice/types/entity-type/page/v/2	$$11.5 \mathrm{ms} \pm 72.6 \mathrm{μs}\left({\color{gray}1.01 \mathrm{\%}}\right) $$	Flame Graph
entity_by_id	entity type ID: https://blockprotocol.org/@alice/types/entity-type/person/v/1	$$11.6 \mathrm{ms} \pm 92.5 \mathrm{μs}\left({\color{gray}0.746 \mathrm{\%}}\right) $$	Flame Graph
entity_by_id	entity type ID: https://blockprotocol.org/@alice/types/entity-type/playlist/v/1	$$11.4 \mathrm{ms} \pm 67.6 \mathrm{μs}\left({\color{gray}-0.004 \mathrm{\%}}\right) $$	Flame Graph
entity_by_id	entity type ID: https://blockprotocol.org/@alice/types/entity-type/song/v/1	$$11.5 \mathrm{ms} \pm 77.0 \mathrm{μs}\left({\color{gray}-1.512 \mathrm{\%}}\right) $$	Flame Graph
entity_by_id	entity type ID: https://blockprotocol.org/@alice/types/entity-type/uk-address/v/1	$$11.6 \mathrm{ms} \pm 63.4 \mathrm{μs}\left({\color{gray}1.12 \mathrm{\%}}\right) $$	Flame Graph

representative_read_entity_type

Function	Value	Mean	Flame graphs
get_entity_type_by_id	Account ID: bf5a9ef5-dc3b-43cf-a291-6210c0321eba	$$8.58 \mathrm{ms} \pm 61.9 \mathrm{μs}\left({\color{gray}0.062 \mathrm{\%}}\right) $$	Flame Graph

representative_read_multiple_entities

Function	Value	Mean	Flame graphs
entity_by_property	traversal_paths=0	0	$$56.4 \mathrm{ms} \pm 317 \mathrm{μs}\left({\color{gray}-0.337 \mathrm{\%}}\right) $$
entity_by_property	traversal_paths=255	1,resolve_depths=inherit:1;values:255;properties:255;links:127;link_dests:126;type:true	$$110 \mathrm{ms} \pm 686 \mathrm{μs}\left({\color{gray}1.64 \mathrm{\%}}\right) $$
entity_by_property	traversal_paths=2	1,resolve_depths=inherit:0;values:0;properties:0;links:0;link_dests:0;type:false	$$64.2 \mathrm{ms} \pm 452 \mathrm{μs}\left({\color{gray}1.33 \mathrm{\%}}\right) $$
entity_by_property	traversal_paths=2	1,resolve_depths=inherit:0;values:0;properties:0;links:1;link_dests:0;type:true	$$73.8 \mathrm{ms} \pm 551 \mathrm{μs}\left({\color{gray}1.77 \mathrm{\%}}\right) $$
entity_by_property	traversal_paths=2	1,resolve_depths=inherit:0;values:0;properties:2;links:1;link_dests:0;type:true	$$82.2 \mathrm{ms} \pm 541 \mathrm{μs}\left({\color{gray}-0.078 \mathrm{\%}}\right) $$
entity_by_property	traversal_paths=2	1,resolve_depths=inherit:0;values:2;properties:2;links:1;link_dests:0;type:true	$$88.2 \mathrm{ms} \pm 504 \mathrm{μs}\left({\color{gray}0.304 \mathrm{\%}}\right) $$
link_by_source_by_property	traversal_paths=0	0	$$43.8 \mathrm{ms} \pm 290 \mathrm{μs}\left({\color{gray}0.543 \mathrm{\%}}\right) $$
link_by_source_by_property	traversal_paths=255	1,resolve_depths=inherit:1;values:255;properties:255;links:127;link_dests:126;type:true	$$72.2 \mathrm{ms} \pm 514 \mathrm{μs}\left({\color{gray}1.42 \mathrm{\%}}\right) $$
link_by_source_by_property	traversal_paths=2	1,resolve_depths=inherit:0;values:0;properties:0;links:0;link_dests:0;type:false	$$49.6 \mathrm{ms} \pm 278 \mathrm{μs}\left({\color{gray}-0.474 \mathrm{\%}}\right) $$
link_by_source_by_property	traversal_paths=2	1,resolve_depths=inherit:0;values:0;properties:0;links:1;link_dests:0;type:true	$$59.2 \mathrm{ms} \pm 466 \mathrm{μs}\left({\color{gray}1.67 \mathrm{\%}}\right) $$
link_by_source_by_property	traversal_paths=2	1,resolve_depths=inherit:0;values:0;properties:2;links:1;link_dests:0;type:true	$$61.0 \mathrm{ms} \pm 408 \mathrm{μs}\left({\color{gray}-1.124 \mathrm{\%}}\right) $$
link_by_source_by_property	traversal_paths=2	1,resolve_depths=inherit:0;values:2;properties:2;links:1;link_dests:0;type:true	$$60.7 \mathrm{ms} \pm 367 \mathrm{μs}\left({\color{gray}-1.660 \mathrm{\%}}\right) $$

scenarios

Function	Value	Mean	Flame graphs
full_test	query-limited	$$112 \mathrm{ms} \pm 691 \mathrm{μs}\left({\color{gray}-4.212 \mathrm{\%}}\right) $$	Flame Graph
full_test	query-unlimited	$$125 \mathrm{ms} \pm 665 \mathrm{μs}\left({\color{gray}-4.216 \mathrm{\%}}\right) $$	Flame Graph
linked_queries	query-limited	$$19.1 \mathrm{ms} \pm 134 \mathrm{μs}\left({\color{lightgreen}-19.808 \mathrm{\%}}\right) $$	Flame Graph
linked_queries	query-unlimited	$$529 \mathrm{ms} \pm 1.21 \mathrm{ms}\left({\color{gray}-1.727 \mathrm{\%}}\right) $$	Flame Graph