Skip to content

Conversation

@bworrell-auth0
Copy link

snyk-top-banner

Snyk has created this PR to upgrade snyk from 1.1296.0 to 1.1297.3.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


  • The recommended version is 6 versions ahead of your current version.

  • The recommended version was released a month ago.

Issues fixed by the recommended upgrade:

Issue Score Exploit Maturity
low severity Insertion of Sensitive Information into Log File
SNYK-JS-SNYK-10497607
441 Proof of Concept
Release notes
Package name: snyk
  • 1.1297.3 - 2025-06-23

    1.1297.3 (2025-06-23)

    The Snyk CLI is being deployed to different deployment channels, users can select the stability level according to their needs. For details please see this documentation

    Bug Fixes

    • logging: Improves the sanitization of credentials in local debug logs. (38322f3)
  • 1.1297.2 - 2025-06-16

    1.1297.2 (2025-06-16)

    The Snyk CLI is being deployed to different deployment channels, users can select the stability level according to their needs. For details please see this documentation

    Bug Fixes

    • logging: Improves the sanitization of credentials in local debug logs. (e054455)
    • language-server: IDE Connectivity for Proxy Users: Fixes an issue where IDE plugins could fail to connect when operating behind an NTLM proxy.
    • language-server: Snyk Code Local Engine Fix: Addresses a regression that prevented the Snyk Code Local Engine (SCLE) from functioning correctly within the IDEs.
  • 1.1297.1 - 2025-05-16

    1.1297.1 (2025-05-16)

    The Snyk CLI is being deployed to different deployment channels, users can select the stability level according to their needs. For details please see this documentation

    Bug Fixes

    • test: Rollbacked a regression introduced by a change in gradle module resolution in version 1.1297.0 (7991133)
  • 1.1297.0 - 2025-05-14

    1.1297.0 (2025-05-14)

    The Snyk CLI is being deployed to different deployment channels, users can select the stability level according to their needs. For details please see this documentation

    Features

    • container: Support scanning container images from tar files without specifying a type (58b0861)
    • iac: Improve IaC deployment to avoid on the fly downloads (5108f58)
    • sbom: Introduce sbom monitor command (24e96c3)
    • test: Improve gradle module resolution (7991133)
    • language-server: Introduce explanation of AI fixes in IDEs (74fa322)

    Bug Fixes

    • container: Fix issue when scanning invalid node manifest files (ceb8020)
    • code: Fix hash mismatches for files containing non-UTF-8 content (33d33e9)
    • iac: Ensure to use the correct org id when sharing results for v2 (1c4094a)
    • iac: Ensure to use target-name (2201f0a)
    • sbom: Fix issues when generating sboms based on NuGet .sln (80c43d9)
    • test: Fix issues when scanning gradle projects on Windows (11586cc)
    • test: Improve error messages when using fail-fast, all-projects and json (a396bd6)
    • test: Fix yarn 2 out of sync issues (18aee45)
    • test: Fix pnpm out of sync issue for duplicated peer and dev dependencies (2581e16)
    • test: Ensure internal dependencies are represented correctly when normalizing Gradle dependencies (c7e2713)
    • test: Fix testing composer-based PHP projects (39e3379)
    • language-server: Fix and improve issue filtering in IDEs (a474d67)
    • language-server: Fix unmanaged C/C++ scans with '—unmanaged' flag in additional parameters (01f53e3)
    • language-server: Fix applying Snyk Code AI fixes on the wrong lines (01f53e3)
  • 1.1296.2 - 2025-04-16

    1.1296.2 (2025-04-16)

    The Snyk CLI is being deployed to different deployment channels, users can select the stability level according to their needs. For details please see this documentation

    News

    • mcp: Add experimental Model Context Protocol server for agentic workflow support (3b5f494)

    Bug Fixes

    • general: Fix OAuth authentication issues (b2684db)
    • code: Write JSON/SARIF files when nested directories do not exist (faca897)
    • test: Clearer error messages when testing multiple projects with fail-fast (a396bd6)
  • 1.1296.1 - 2025-03-27

    1.1296.1 (2025-03-27)

    The Snyk CLI is being deployed to different deployment channels, users can select the stability level according to their needs. For details please see this documentation

    News

    • test: Add poetry v2 support (49c6652)
    • code: Fix backward compatibility issue in sarif driver name (5ef6442)
    • iac: Fix iac test network issues (815ed82)
    • language-server: Increase authentication resilience (07fc381)
    • language-server: Avoid that the trust dialog blocks the application. (07fc381)
    • language-server: Fix duplicate Open Source Issues appearing only in a single IDE tree node, despite occurring in multiple files. (07fc381)
    • dependency: Upgrade golang.org/x/net to address CVE-2025-22870 (7edd450)
  • 1.1296.0 - 2025-03-13

    1.1296.0 (2025-03-13)

    The Snyk CLI is being deployed to different deployment channels, users can select the stability level according to their needs. For details please see this documentation

    News

    • general: Improved error logging and handling

    Features

    • container: add support for --exclude-node-modules option (4756f27)
    • container: adds kaniko support (bfb69c8)
    • general: display a unique interactionID alongside each error (960a71c)
    • test: python support for local wheel files specifiers (42675eb)
    • test: dep-graph json file output (90f24ec)
    • test: print legacy tree with json file output (b256937)
    • test: display all applicable maven unmanaged identities (ebf6ba1)
    • code: enable v1 fingerprints in code sarif output (00644af)
    • test: Add 'pkgIdProvenance' labels to dependency graph nodes when the package identity has been changed from what has been discovered in the manifest files (4d529b3)
    • test: added Python support for sys_platform (1aa1565)
    • language-server AI fix explain (26d118f)
    • language-server enable calling mcp commands via ls commands (6f80a03)
    • language-server add scan source to metrics (6f80a03)
    • language-server add mcp server, refactoring (6f80a03)
    • language-server added a new code action and code lens for showDocument (8e7ab06)
    • language-server add Option for Pre-Scan command, fix auth race (64920ac)
    • language-server add ideStyle variable to static html (0a05e66)
    • language-server intiial commit of shared html for scan summary panel (0a05e66)
    • language-server send scan summary and scan base & working directory concurrently (1908a08)
    • language-server store folder config outside of git repo, add reference folder (50d0770)
    • language-server send initial summary panel notification (50d0770)
    • language-server add a new $/snyk.scanSummary notificiation (fc80c9c)
    • language-server support maven pom hierarchies for highlighting & fixes (e5924fc)
    • language-server Sending a user event when fixing inside the editor (e5924fc)
    • language-server Sending IDE+extension versions to autofix (a18975a)

    Bug Fixes

    • container: add container test doc info for --exclude-node-modules (2faf2d1)
    • test: fix dotnet UTF-16LE support for target framework (e90075a)
    • test: reduce false positives when scanning improved dotnet projects (c21625a)
    • test: use --strict-out-of-sync when set to false with pnpm for top level dependencies (8d5b71a)
    • test: fix OutOfSync errors in pnpm for download urls (b6e4ea0)
    • test: fix OutOfSync errors in pnpm git protocol dependencies (5c8dc34)
    • code: Don't write sarif files when no results are found (5a15113)
    • code: Support single file test for golang native implementation (d7881f1)
    • sbom: mavenAggregateProject with Dverbose or sbom (e88cf71)
    • iac: Updates the user messages for snyk iac test --report for IaC V2 (1c9b3b3)
    • language-server check folder trust before opening/changing/saving file (26d118f)
    • language-server new issue summary totals (6f80a03)
    • language-server add correct lesson url for license issues (6f80a03)
    • language-server issues with non-UTF-8 encoded files in Snyk Code (8e7ab06)
    • language-server ignore first dataflow element for oss fingerprint (64920ac)
    • language-server use workdir folderConfig for ref Scan (64920ac)
    • language-server test bundle add size property (0a05e66)
    • language-server normalize path for file filter and reduce memory footprint (0a05e66)
    • language-server add ideScript to Summary html (0a05e66)
    • language-server add css variables and headers (0a05e66)
    • language-server panic in range_finder (50d0770)
    • language-server fix issue metadata used for hashing (fc80c9c)
    • language-server use diff without enricher for delta (b213b58)
    • language-server move issue view option filtering to the LS to not display ignored diagnostics in editor (b213b58)
    • language-server add api version query to explain API URL (b213b58)
from snyk GitHub release notes

Important

  • Check the changes in this PR to ensure they won't cause issues with your project.
  • This PR was automatically created by Snyk using the credentials of a real user.
  • Max score is 1000. Note that the real score may have changed since the PR was raised.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants