Update all non-major dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
openai	>=1.78,<1.79 -> >=1.82,<1.83
semgrep	>=1.121,<1.122 -> >=1.122,<1.123
types-defusedxml (changelog)	==0.7.0.20240218 -> ==0.7.0.20250516

---

Release Notes

openai/openai-python (openai)

v1.82.0

Compare Source

Full Changelog: v1.81.0...v1.82.0

Features

• api: new streaming helpers for background responses (2a65d4d)

Bug Fixes

• azure: mark images/edits as a deployment endpoint #​2371 (5d1d5b4)

Documentation

• readme: another async example fix (9ec8289)
• readme: fix async example (37d0b25)

v1.81.0

Compare Source

Full Changelog: v1.80.0...v1.81.0

Features

• api: add container endpoint (054a210)

v1.80.0

Compare Source

Full Changelog: v1.79.0...v1.80.0

Features

• api: new API tools (d36ae52)

Chores

• docs: grammar improvements (e746145)

v1.79.0

Compare Source

Full Changelog: v1.78.1...v1.79.0

Features

• api: further updates for evals API (32c99a6)
• api: manual updates (25245e5)
• api: responses x eval api (fd586cb)
• api: Updating Assistants and Evals API schemas (98ba7d3)

Bug Fixes

• fix create audio transcription endpoint (e9a89ab)

Chores

• ci: fix installation instructions (f26c5fc)
• ci: upload sdks to package manager (861f105)

returntocorp/semgrep (semgrep)

v1.122.0

Compare Source

Added

• Adds support for the UV package manager in Supply Chain scans. (SC-1900)

Fixed

• pro: Fixed inter-file naming bug affecting Go's struct-methods that could result
  in false negatives.

  Previously, adding a pattern-inside like

  func ($THING $TYPE) $FUNC(...) $R { ... }
  

  to a taint rule could cause some findings to incorrectly stop being reported. (code-7767)

• PRO: Fixed the issue with type matching when a type has a type parameter, e.g., matching the pattern std::vector<$T> with the code std::vector<int> v in C++. (code-8443)

• Make Nuget dependency child parsing case insensitive (sc-2355)

• Fixed bug where direct dev depenencies were not marked as direct when parsing package-lock.json projects. (sc-dev)

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud