Bump semgrep from 1.18.0 to 1.31.2 in /server

[dependabot]

Bumps semgrep from 1.18.0 to 1.31.2.

Release notes

Sourced from semgrep's releases.

Release v1.31.2

1.31.2 - 2023-07-07

No significant changes.

Release v1.31.1

1.31.1 - 2023-07-07

No significant changes.

Release v1.31.0

1.31.0 - 2023-07-07

Added

• Make CLI hit the new endpoint for the reliable fixed status on the Semgrep app. (cod-16)

• feat(rule syntax): Metavariable Type Extension for Semgrep Rule Syntax 2.0

  This PR introduces the changes made in Semgrep rule syntax 1.0 to version 2.0 as well.

  rule syntax 2.0

  rules:

  • id: no-string-eqeq message: find errors severity: WARNING languages:
    • java match: all:
      • not: null == (String $Y)
      • $X == (String $Y)

  rule syntax 2.0 after proposed change

  rules:

  • id: no-string-eqeq message: find errors severity: WARNING languages:
    • java match: all:
      • not: null == $Y
      • $X == $Y where:
      • metavariable: $Y type: String (gh-8183)

... (truncated)

Changelog

Sourced from semgrep's changelog.

1.31.2 - 2023-07-07

No significant changes.

1.31.1 - 2023-07-07

No significant changes.

1.31.0 - 2023-07-07

Added

• Make CLI hit the new endpoint for the reliable fixed status on the Semgrep app. (cod-16)

• feat(rule syntax): Metavariable Type Extension for Semgrep Rule Syntax 2.0

  This PR introduces the changes made in Semgrep rule syntax 1.0 to version 2.0 as well.

  rule syntax 2.0

  rules:

  • id: no-string-eqeq message: find errors severity: WARNING languages:
    • java match: all: - not: null == (String $Y) - $X == (String $Y)

  rule syntax 2.0 after proposed change

  rules:

  • id: no-string-eqeq message: find errors severity: WARNING languages:
    • java match: all: - not: null == $Y - $X == $Y where: - metavariable: $Y type: String (gh-8183)

• Rust: Added the ability to taint macro calls through its arguments, in macro calls with multiple arguments. (pa-2902)

• Add severity and suggested upgrade versions to Supply Chain findings (sc-772)

• Added support for pnpm lockfile versions >= 6.0 (sc-824)

• (sc-866)

Fixed

... (truncated)

Commits

• 951f47a chore: Bump version to 1.31.2
• 15f075b enable multi-arch builds for releases (#8235)
• 717ed0e Merge pull request #8233 from returntocorp/release-1.31.1
• 4ee1546 chore: Bump version to 1.31.1
• 7207051 Merge pull request #8230 from returntocorp/release-1.31.0
• 6f9159d fix: [ci] update handling of multi-arch input for release (#8232)
• 8157c0c fallback default to workaround inputs.multi-arch being null (#8231)
• d1f2cac chore: Bump version to 1.31.0
• ec824d9 fix(dockerfile): Add support for single-quoted strings in dockerfiles (#8228)
• d5b3fdb upload semgrep JS assets directly to the static bucket (#8227)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

---

This change is 

[dependabot]

Superseded by #3663.