Skip to content

SDK regeneration#195

Merged
niteshsandal-merge merged 4 commits into
mainfrom
fern-bot/2026-06-09_16-28-22_112
Jun 11, 2026
Merged

SDK regeneration#195
niteshsandal-merge merged 4 commits into
mainfrom
fern-bot/2026-06-09_16-28-22_112

Conversation

@fern-api

@fern-api fern-api Bot commented Jun 9, 2026

Copy link
Copy Markdown
Contributor

Automated SDK generation by Fern

@fern-api fern-api Bot requested a review from a team as a code owner June 9, 2026 16:28
@fern-api fern-api Bot requested a review from smazur17 June 9, 2026 16:28
@semgrep-code-merge-api

Copy link
Copy Markdown

Semgrep found 17 non-literal-import findings:

  • src/merge/resources/calendar/types/init.py
  • src/merge/resources/calendar/resources/linked_accounts/types/init.py
  • src/merge/resources/calendar/resources/linked_accounts/init.py
  • src/merge/resources/calendar/resources/link_token/types/init.py
  • src/merge/resources/calendar/resources/link_token/init.py
  • src/merge/resources/calendar/resources/issues/types/init.py
  • src/merge/resources/calendar/resources/issues/init.py
  • src/merge/resources/calendar/resources/groups/types/init.py
  • src/merge/resources/calendar/resources/groups/init.py
  • src/merge/resources/calendar/resources/events/types/init.py
  • src/merge/resources/calendar/resources/events/init.py
  • src/merge/resources/calendar/resources/calendars/types/init.py
  • src/merge/resources/calendar/resources/calendars/init.py
  • src/merge/resources/calendar/resources/async_passthrough/types/init.py
  • src/merge/resources/calendar/resources/async_passthrough/init.py
  • src/merge/resources/calendar/resources/init.py
  • src/merge/resources/calendar/init.py

Untrusted user input in importlib.import_module() function allows an attacker to load arbitrary code. Avoid dynamic values in importlib.import_module() or use a whitelist to prevent running untrusted code.

Comment thread poetry.lock
trio = ["trio (>=0.26.1)"]

[[package]]
name = "certifi"

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Legal Risk

certifi 2026.5.20 was released under the MPL-2.0 license, a license that
has been flagged by your organization for consideration.

Recommendation

While merging is not directly blocked, it's best to pause and consider what it means to use this license before continuing. If you are unsure, reach out to your security team or Semgrep admin to address this issue.

@niteshsandal-merge niteshsandal-merge merged commit d1b3979 into main Jun 11, 2026
6 of 7 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants