[Snyk] Upgrade snyk from 1.1296.0 to 1.1300.2 #368
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Snyk has created this PR to upgrade snyk from 1.1296.0 to 1.1300.2. See this package in npm: snyk See this project in Snyk: https://app.snyk.io/org/iam-KPWiZJYntQ5PW7Pgqw4LGq/project/db4ee70b-14c6-451a-ace6-16477e6926e6?utm_source=github&utm_medium=referral&page=upgrade-pr
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Snyk has created this PR to upgrade snyk from 1.1296.0 to 1.1300.2.
ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
The recommended version is 15 versions ahead of your current version.
The recommended version was released a month ago.
Issues fixed by the recommended upgrade:
SNYK-JS-SNYK-10497607
Release notes
Package name: snyk
-
1.1300.2 - 2025-10-28
- security: Upgrades dependencies to address CVE-2025-47913 (d7e87e2)
- general: Improved error messaging (5d16466)
-
1.1300.1 - 2025-10-21
- mcp: Added support for the MCP server to use IDE extension storage when running in VS Code (7f26dc6)
- redteam: Added a new experimental AI Red Teaming feature, read more: https://docs.snyk.io/developer-tools/snyk-cli/commands/ai-red-teaming (fe37e0f)
- test: Fix issue where npm aliases only detected the latest version of a dependency (cb37da7)
- security: Upgrades dependencies to address CVE-2025-58058 and CVE-2025-11065 (d7e87e2)
- general: Improved error messaging (5d16466)
- logging: Remove support for legacy DEBUG environment variable. For the supported debugging options, please check https://docs.snyk.io/developer-tools/snyk-cli/debugging-the-snyk-cli (2087f74)
-
1.1300.0 - 2025-10-08
- general: Improve SARIF compatibility by adding runAutomationDetails (3e232e5)
- container: Add support scanning system JARs (54e84d8)
- container: Add TargetOS to output of container scan (aa55cd9)
- test: Add support for godot projects (d9fc200)
- test: Add support for maven metaversions (f321ffa)
- language-server: Add CVSSv4 Links in IDE Issue Details
- mcp: Workflow and performance improvements
- container: Fixed crashes when scanning docker images with very large files (72cb040)
- test: Re-enable support for python 2.7 (02c7fe3)
- test: Improved error information when using --all-projects (36d14f9)
- test: Fix a bug due to case-sensitive ignores (b432406)
- test: Resolve project assets file path dynamically (75a152e)
- iac: Upgrade iac components to address a vulnerability [IAC-3439] (eaaaf84)
- logging: Fix broken debug logs due to secret redaction by redacting all user input (0cf19a7)
- language-server: Multiple bugfixes
-
1.1299.1 - 2025-09-24
- language-server: Fix titles of Snyk Open Source code actions in IDEs (0add44d)
- code: Include missing uploadResults property in Sarif output (693e548)
- logging: Fix broken debug logs due to incorrect redaction (0cf19a7)
-
1.1299.0 - 2025-09-01
- auth: Support for PAT auto region configuration. (ad8e4a7)
- code: Fixes
- code: Fixes an issue with
- container: Stops spawning commands using a shell. (7ee9e15)
- dependency: Fixes
- general: Fixes a bug where formatting of log timestamps could cause a crash in some cases. (92fa8be)
- iac: Fixes wrong status code checks. (77152e5)
- language-server: Fixes a bug related to the analytics environment variables. (6916af8)
- language-server: Correctly populates the environment for Open Source scans when called from the IDE. (945b029)
- language-server: Ensures changed API URLs are respected during authentication. (24ed981)
- language-server: MCP tool updates to support feedback and better tool descriptions. (8f2a8d1)
- test: Fixes a bug where
- test: Improves error messages when using
-
1.1298.3 - 2025-08-14
-
-
- For Linux x64 environments: glibc version 2.28 or higher
- For Linux arm64 environments: glibc version 2.31 or higher
-
- test: Added support for Gradle 9.
-
1.1298.2 - 2025-07-30
- Effective with release (Snyk CLI 1.1298.0), the minimum required GNU C Library (glibc) versions on Linux will be updated as follows:
- For Linux x64 environments: glibc version 2.28 or higher
- For Linux arm64 environments: glibc version 2.31 or higher
- If this affects you, please follow the advice here. Possible issues are errors mentioning
- code: Fix code test --report when a project_id environment variable exists (8be17d6)
- mcp: Skip trust browser popup if folder is already trusted
- mcp: Improve container scan security
- language-server: Fixed missing AI Fix entitlements for cases where the default org didn’t have AI Fix enabled
-
1.1298.1 - 2025-07-22
- Effective with release (Snyk CLI 1.1298.0), the minimum required GNU C Library (glibc) versions on Linux will be updated as follows:
- For Linux x64 environments: glibc version 2.28 or higher
- For Linux arm64 environments: glibc version 2.31 or higher
- If this affects you, please follow the advice here. Possible issues are errors mentioning
- container: Fix failing scan of local container images (6095a60)
- mcp: Fix incomplete mcp instrumentation (9108dc0)
-
1.1298.0 - 2025-07-16
- Effective with this release (Snyk CLI 1.1298.0), the minimum required GNU C Library (glibc) versions on Linux will be updated as follows:
- For Linux x64 environments: glibc version 2.28 or higher
- For Linux arm64 environments: glibc version 2.31 or higher
- If this affects you, please follow the advice here. Possible issues are errors mentioning
- language-server: Introduce a folder trust mechanism for the MCP extension (e8fe9f8)
- language-server: Allow command cancelling for login command (e8fe9f8)
- language-server: Support Snyk personal access tokens as an authentication method for IDEs (5ccabc9)
- language-server: IAW UI improvements (8cd643d)
- test, monitor, sbom: Maven Dverbose improvement for long running scans resulting from dense dependency graphs creation (5abe28b)
- test: Improved support for comments in Dotnet's global.json file (164618c)
- test: NPM/Yarn alias are now supported and honored by default. (beb9fcc)
- test: Node IDs in the dep-graph produced by
- test: Use
- test: For gradle projects, internal project dependencies containing multiple artifacts disguised under one artifact should now show all dependencies instead of randomly picking one of the dependencies grouped under the
- auth: Support Snyk personal access tokens as an authentication method for the CLI (217aa3e)
- aibom: Added aibom extension (58e5143)
- aibom: Support optional html rendering when using --html (dd4de81)
- container: Add support for RPM packages scanning in SLE15.2+ images (c5e3a03)
- general: Fixes incorrect SARIF schema link for Code, Container, IAC and Open Source product line output (f283dd9)
- language-server: MCP tool description and params (bb88287)
- language-server: Update IAW wording to match web UI (bb88287)
- language-server: General MCP extension improvements (e8fe9f8)
- language-server: Make sure parsing of issues does not end prematurely for unmanaged scans (01f53e3)
- language-server: AI fix applying to the wrong lines (01f53e3)
- language-server: Display inline ignores, if feature flag is set in VSCode (01f53e3)
- language-server: OAuth flow should use GAF network HTTP Client (9c36d43)
- language-server: Add
- language-server: Parameter precedence for SCA scans (9c36d43)
- language-server: AIFix loads folder path from cached issues instead of computing it (72dd095)
- language-server: Potential cross-site scripting (XSS) vulnerability in the HTML reports generated by the IaC scanning infrastructure (72dd095)
- language-server: Ignored OSS issues are not propagated to the client (72dd095)
- language-server: Workspace folder trust validation failure on case-insensitive filesystems (Windows and macOS) when comparing paths with different letter casing (72dd095)
- langauge-server: Read locks when running auth command (420d62a)
- language-server: Authentication command is now cancellable (35eb9a8)
- language-server: MCP command for SCA (c6f1203)
- language-server: Send auth analytics when token updated (6916af8)
- test, monitor, sbom: Maven Dverbose algorithm adds only the dependencies resolved by maven in the dependency graph/sbom (9b6abd3)
- test, monitor, sbom:
- test, monitor: Misleading
- test, monitor: Misleading
- test, monitor: Fixes error in pip scans when a remote requirement matched the name of local directory (c196bae)
- test: Imports that failed when that file contained special content such as URLs will no longer fail because of it (164618c)
- test: Scanning open source dependencies of PHP projects when composer is installed on the user machine works again (39e3379)
- test: Bump nodejs parser to handle manual aliases on indirct deps. (15f693a)
- test Bump
- test: Performance improvements running
- test: Fixed error
- code: In the golang native code test implementation (CCI), fix hash mismatch errors when uploading non UTF-8 content (33d33e9)
- code: Sarif and json file output handling aligns with non-native code implementation (7f28efa)
- iac: Fix CVE-2023-46402 (5675ed4)
- iac: Fix issue preventing users on regional Snyk instances from accessing their IaC scan results via
- container: Add container test target reference support (61b391b)
- sbom: Performance improvements running
- ignore: Align handling for invalid ignore expiry across Snyk product lines (54b4f56)
- logging: Redact negotiate in debug logs (8daa112)
- logging: Fixes some crashes when the CLI was used with debug and trace logging level enabled (92fa8be)
-
1.1297.3 - 2025-06-23
- logging: Improves the sanitization of credentials in local debug logs. (38322f3)
-
1.1297.2 - 2025-06-16
-
1.1297.1 - 2025-05-16
-
1.1297.0 - 2025-05-14
-
1.1296.2 - 2025-04-16
-
1.1296.1 - 2025-03-27
-
1.1296.0 - 2025-03-13
from snyk GitHub release notes1.1300.2 (2025-10-28)
The Snyk CLI is being deployed to different deployment channels, users can select the stability level according to their needs. For details please see this documentation
Bug Fixes
1.1300.1 (2025-10-21)
The Snyk CLI is being deployed to different deployment channels, users can select the stability level according to their needs. For details please see this documentation
Features
Bug Fixes
1.1300.0 (2025-10-08)
The Snyk CLI is being deployed to different deployment channels, users can select the stability level according to their needs. For details please see this documentation
Features
Bug Fixes
1.1299.1 (2025-09-24)
The Snyk CLI is being deployed to different deployment channels, users can select the stability level according to their needs. For details please see this documentation
Bug Fixes
1.1299.0 (2025-08-28)
The Snyk CLI is being deployed to different deployment channels, users can select the stability level according to their needs. For details please see this documentation.
Features
Bug Fixes
code test --reportwhen aproject_idenvironment variable exists. (6168b1d)snyk code testwhere an empty input parameter would cause inconsistent behavior. (a661235)CVE-2025-8959. (5a548fb)project.assets.jsonfiles would not be detected in cases where it's destination path was altered with .NET properties. (75a152e)--all-projects. (960fa8e)1.1298.3 (2025-08-14)
The Snyk CLI is being deployed to different deployment channels, users can select the stability level according to their needs. For details please see this documentation
News
aibom: This command is now publicly available. Note that the feature is still experimental and subject to breaking changes without notice.
Effective with release (Snyk CLI 1.1298.0), the minimum required GNU C Library (glibc) versions on Linux will be updated as follows:
If this affects you, please follow the advice here. Possible issues are errors mentioning
GLIBC_2.27orGLIBC_2.31not found.Bug Fixes
1.1298.2 (2025-07-30)
The Snyk CLI is being deployed to different deployment channels, users can select the stability level according to their needs. For details please see this documentation
News
GLIBC_2.27orGLIBC_2.31not found.Bug Fixes
1.1298.1 (2025-07-22)
The Snyk CLI is being deployed to different deployment channels, users can select the stability level according to their needs. For details please see this documentation
News
GLIBC_2.27orGLIBC_2.31not found.Bug Fixes
1.1298.0 (2025-07-10)
The Snyk CLI is being deployed to different deployment channels, users can select the stability level according to their needs. For details please see this documentation
News
GLIBC_2.27orGLIBC_2.31not found.Features
snyk test --print-graphwill now contain type and classifier (22ba468)SNYK_TMP_PATHenv var for temp dir path for Python tests (3ba01d1)disguisedcoordinate when scanned viasnyk test --gradle-normalize-deps(22ba468)Bug Fixes
snyk-ls-prefix tox-snyk-ideheader (9c36d43)-- -Dverboseaffecting scope collisions from the maven Dverbose command output (parentNodeId does not exist error). (0a48b96)OutOfSyncerror in npm projects for top-level bundled dependencies (8ac67c6)OutOfSyncerror in yarn projects with multiple versions for the same dependency (8ac67c6)snyk-mvn-pluginto require Node 20 (c91cfbb)snyk test --print-graphon gradle projects (156fdb2)Could not scan C/C++ project: RangeError: Maximum call stack size exceededwhich was sometimes seen when scanning very large archives usingsnyk test --unmanaged(5ab0676)snyk iac test --reportcommand (4ed65cc)snyk sbomon gradle projects (156fdb2)1.1297.3 (2025-06-23)
The Snyk CLI is being deployed to different deployment channels, users can select the stability level according to their needs. For details please see this documentation
Bug Fixes
Important
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.
For more information: