Skip to content

chore(deps-dev): bump snyk from 1.1118.0 to 1.1296.2#495

Closed
dependabot[bot] wants to merge 1 commit intodevelopfrom
dependabot/npm_and_yarn/develop/snyk-1.1296.2
Closed

chore(deps-dev): bump snyk from 1.1118.0 to 1.1296.2#495
dependabot[bot] wants to merge 1 commit intodevelopfrom
dependabot/npm_and_yarn/develop/snyk-1.1296.2

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Apr 21, 2025

Bumps snyk from 1.1118.0 to 1.1296.2.

Release notes

Sourced from snyk's releases.

v1.1296.2

1.1296.2 (2025-04-16)

The Snyk CLI is being deployed to different deployment channels, users can select the stability level according to their needs. For details please see this documentation

News

  • mcp: Add experimental Model Context Protocol server for agentic workflow support (3b5f494)

Bug Fixes

  • general: Fix OAuth authentication issues (b2684db)
  • code: Write JSON/SARIF files when nested directories do not exist (faca897)
  • test: Clearer error messages when testing multiple projects with fail-fast (a396bd6)

v1.1296.1

1.1296.1 (2025-03-27)

The Snyk CLI is being deployed to different deployment channels, users can select the stability level according to their needs. For details please see this documentation

News

  • test: Add poetry v2 support (49c6652)
  • code: Fix backward compatibility issue in sarif driver name (5ef6442)
  • iac: Fix iac test network issues (815ed82)
  • language-server: Increase authentication resilience (07fc381)
  • language-server: Avoid that the trust dialog blocks the application. (07fc381)
  • language-server: Fix duplicate Open Source Issues appearing only in a single IDE tree node, despite occurring in multiple files. (07fc381)
  • dependency: Upgrade golang.org/x/net to address CVE-2025-22870 (7edd450)

v1.1296.0

1.1296.0 (2025-03-13)

The Snyk CLI is being deployed to different deployment channels, users can select the stability level according to their needs. For details please see this documentation

News

  • general: Improved error logging and handling

Features

  • container: add support for --exclude-node-modules option (4756f27)
  • container: adds kaniko support (bfb69c8)
  • general: display a unique interactionID alongside each error (960a71c)
  • test: python support for local wheel files specifiers (42675eb)
  • test: dep-graph json file output (90f24ec)
  • test: print legacy tree with json file output (b256937)
  • test: display all applicable maven unmanaged identities (ebf6ba1)
  • code: enable v1 fingerprints in code sarif output (00644af)
  • test: Add 'pkgIdProvenance' labels to dependency graph nodes when the package identity has been changed from what has been discovered in the manifest files (4d529b3)
  • test: added Python support for sys_platform (1aa1565)

... (truncated)

Commits
  • e38ac99 Merge pull request #5842 from snyk/tmp/release-1.1296.2-changes
  • e97a685 chore: merge release-candidate into release/1.1296 Mie 16 Apr 2025 16:33:26 EEST
  • c782797 Merge pull request #5839 from snyk/chore/update-rc
  • efe1b58 fix(language-server): add scansource to workspace scan cmd
  • f88a591 fix: ensure version is patch only
  • 416655a Merge branch 'release/1.1296' into chore/update-rc
  • 5a99db6 Merge pull request #5832 from snyk/chore/prepare-v1.1296.2-release
  • 9de703d chore: update release notes
  • 425052b docs: synchronizing help from snyk/user-docs
  • 2523dcd fix: add origin check to MCP SSE
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [snyk](https://github.com/snyk/snyk) from 1.1118.0 to 1.1296.2.
- [Release notes](https://github.com/snyk/snyk/releases)
- [Commits](snyk/cli@v1.1118.0...v1.1296.2)

---
updated-dependencies:
- dependency-name: snyk
  dependency-version: 1.1296.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Apr 21, 2025
@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot bot commented on behalf of github May 19, 2025

Superseded by #499.

@dependabot dependabot bot closed this May 19, 2025
@dependabot dependabot bot deleted the dependabot/npm_and_yarn/develop/snyk-1.1296.2 branch May 19, 2025 19:13
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants