Add information on Semgrep version restriction

Author: mschwager

CHANGELOG.md

@@ -7,6 +7,12 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [0.8.1] - 2025-03-14
+
+### Fixed
+
+- Restrict Semgrep versions to `<1.97.0` to support code snippets [#10762](https://github.com/semgrep/semgrep/issues/10762)
+
 ## [0.8.0] - 2024-06-26
 
 ### Added

README.md

@@ -6,6 +6,9 @@
 
 Find authentication (authn) and authorization (authz) security bugs in web application routes:
 
+> [!IMPORTANT]
+> The Semgrep functionality `route-detect` depends on to display code snippets has been moved behind their cloud app. For more information see [#10762](https://github.com/semgrep/semgrep/issues/10762). However, earlier versions of Semgrep still support this behavior. When using `route-detect`, make sure to install a version of Semgrep before `1.97.0`. This can be accomplished with the following command: `python -m pip install 'semgrep<1.97.0'`.
+
 ![Routes demo](https://raw.githubusercontent.com/mschwager/route-detect/main/routes-demo.png)
 
 <p align="center">

pyproject.toml

@@ -1,6 +1,6 @@
 [tool.poetry]
 name = "route-detect"
-version = "0.8.0"
+version = "0.8.1"
 description = "Find authentication (authn) and authorization (authz) security bugs in web application routes."
 authors = []
 license = "BSD-3-Clause"
@@ -11,7 +11,7 @@ packages = [{include = "routes"}]
 
 [tool.poetry.dependencies]
 python = "^3.8"
-semgrep = "^1.36.0"
+semgrep = "<1.97.0"
 
 [tool.poetry.group.dev.dependencies]
 pytest = "^7.2.1"
@@ -24,6 +24,11 @@ optional = true
 [tool.poetry.scripts]
 routes = "routes.main:main"
 
+[[tool.poetry.source]]
+name = "foo"
+url = "https://foo.bar/simple/"
+priority = "secondary"
+
 [tool.coverage.run]
 source = ["routes"]