Skip to content

SDK regeneration#194

Closed
fern-api[bot] wants to merge 1 commit into
mainfrom
fern-bot/2026-06-09_16-09-05_152
Closed

SDK regeneration#194
fern-api[bot] wants to merge 1 commit into
mainfrom
fern-bot/2026-06-09_16-09-05_152

Conversation

@fern-api

@fern-api fern-api Bot commented Jun 9, 2026

Copy link
Copy Markdown
Contributor

Automated SDK generation by Fern

@fern-api fern-api Bot requested a review from a team as a code owner June 9, 2026 16:09
@fern-api fern-api Bot requested a review from smazur17 June 9, 2026 16:09
@semgrep-code-merge-api

Copy link
Copy Markdown

Semgrep found 17 non-literal-import findings:

  • src/merge/resources/calendar/types/init.py
  • src/merge/resources/calendar/resources/linked_accounts/types/init.py
  • src/merge/resources/calendar/resources/linked_accounts/init.py
  • src/merge/resources/calendar/resources/link_token/types/init.py
  • src/merge/resources/calendar/resources/link_token/init.py
  • src/merge/resources/calendar/resources/issues/types/init.py
  • src/merge/resources/calendar/resources/issues/init.py
  • src/merge/resources/calendar/resources/groups/types/init.py
  • src/merge/resources/calendar/resources/groups/init.py
  • src/merge/resources/calendar/resources/events/types/init.py
  • src/merge/resources/calendar/resources/events/init.py
  • src/merge/resources/calendar/resources/calendars/types/init.py
  • src/merge/resources/calendar/resources/calendars/init.py
  • src/merge/resources/calendar/resources/async_passthrough/types/init.py
  • src/merge/resources/calendar/resources/async_passthrough/init.py
  • src/merge/resources/calendar/resources/init.py
  • src/merge/resources/calendar/init.py

Untrusted user input in importlib.import_module() function allows an attacker to load arbitrary code. Avoid dynamic values in importlib.import_module() or use a whitelist to prevent running untrusted code.

Comment thread poetry.lock
@@ -38,13 +38,13 @@ trio = ["trio (>=0.26.1)"]

[[package]]
name = "certifi"

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Legal Risk

certifi 2026.5.20 was released under the MPL-2.0 license, a license that
has been flagged by your organization for consideration.

Recommendation

While merging is not directly blocked, it's best to pause and consider what it means to use this license before continuing. If you are unsure, reach out to your security team or Semgrep admin to address this issue.

@waisshahbaz waisshahbaz closed this Jun 9, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant