Snyk: baixar versions anteriors

## [1.1308.3](https://github.com/snyk/snyk/compare/v1.1308.2...v1.1308.3) (2026-10-23)

The Snyk CLI is being deployed to different deployment channels, users can select the stability level according to their needs. For details please see [this documentation](https://docs.snyk.io/snyk-cli/releases-and-channels-for-the-snyk-cli)

### Bug Fixes

• **deps**：Updates dependencies to fix vulnerabilities:
• Updates the embedded Node.js runtime to 22.23.4 to address CVE-2026-105481, CVE-2026-105482, CVE-2026-106069, CVE-2026-106073, CVE-2026-106074, and CVE-2026-111497 ([23482f5bd](https://github.com/snyk/snyk/commit/23482f5bd63c800ee8b014c4530c1d17ef9a9397))
• Updates the `toml` library used by `snyk fix` for Poetry projects to 5.0.1 to address CVE-2026-114141, CVE-2026-114142, CVE-2026-114143, and CVE-2026-114144 ([f07ccbac6](https://github.com/snyk/snyk/commit/f07ccbac6e96126986be090473e148776509f426))

## [1.1308.2](https://github.com/snyk/snyk/compare/v1.1308.1...v1.1308.2) (2026-10-21)

The Snyk CLI is being deployed to different deployment channels, users can select the stability level according to their needs. For details please see [this documentation](https://docs.snyk.io/snyk-cli/releases-and-channels-for-the-snyk-cli)

### Bug Fixes

• **test**：.NET scans no longer fail with NETSDK1067 when `SelfContained=true` is set in the build environment. ([28e90c6ea](https://github.com/snyk/snyk/commit/28e90c6ea72eed11bcf8a290135531bf226ee502))
• **test**：`snyk test --source-dir` now returns a clear validation error when used without `--reachability=true`, instead of ignoring the flag or treating the path as the project directory. ([3af559571](https://github.com/snyk/snyk/commit/3af5595711f9a6b2399faeee9d9375eac33e3850))
• **test**：`snyk test --fail-on=patchable` no longer fails with "Unsupported value 'patchable' for --fail-on flag". ([3af559571](https://github.com/snyk/snyk/commit/3af5595711f9a6b2399faeee9d9375eac33e3850))
• **language-server**：Various Snyk Language Server fixes: an expired token now shows one re-authenticate prompt instead of several; signing in from one IDE window now signs in your other open windows; and when you only show net new issues, the IDE finds the base branch from `origin/HEAD` and asks you to pick one if none is found, instead of reporting a failed scan. ([97ef9474f](https://github.com/snyk/snyk/commit/97ef9474f20e6b16099b2816fad9c2f2e08de232))
• **deps**：Updates dependencies to fix vulnerabilities:
• SNYK-JS-TAR-18319500 ([05319827c](https://github.com/snyk/snyk/commit/05319827c30022eecf21a2ac45bda4be7508fa15))
• CVE-2026-33532 ([48f87b8ab](https://github.com/snyk/snyk/commit/48f87b8ab1d97d80eec261f9387c87ea963d6fc2))
• CVE-2026-73055 ([14a844fed](https://github.com/snyk/snyk/commit/14a844feda8c48409c005d25880717792ed235a3))
• Updates the Go runtime to 1.26.10 to address CVE-2026-78663, CVE-2026-78669, and CVE-2026-111943 ([6a8f882fc](https://github.com/snyk/snyk/commit/6a8f882fc8de67fbd8ce3297362b83f8100c2403))
• CVE-2026-78659, CVE-2026-78660, and CVE-2026-97032 ([50da69a7c](https://github.com/snyk/snyk/commit/50da69a7cbb12a2c8295be69626fc175356dcd80))
• CVE-2026-102941 ([b6f592124](https://github.com/snyk/snyk/commit/b6f592124df5cc8699251b919681b88c7531170e))

## [1.1308.1](https://github.com/snyk/snyk/compare/v1.1308.0...v1.1308.1) (2026-10-14)

The Snyk CLI is being deployed to different deployment channels, users can select the stability level according to their needs. For details please see [this documentation](https://docs.snyk.io/snyk-cli/releases-and-channels-for-the-snyk-cli)

### Features

• **test**：`snyk test --html` and `--html-file-output` no longer require preview features to be enabled. ([3bc664655](https://github.com/snyk/snyk/commit/3bc664655bf81383ee198b62966023f959b105fd))

### Bug Fixes

• **test**：Ensure the project name is consistently displayed in the test summary when available. ([ca8744853](https://github.com/snyk/snyk/commit/ca874485305818fbb944d193dd7f248d92544b6c))
• **deps**：Updates dependencies to fix vulnerabilities:
• CVE-2022-21681 ([334f8735c](https://github.com/snyk/snyk/commit/334f8735cea9d2d77125aab80e40ad246a95ec07))
• Updates the Go runtime to 1.26.9 to address CVE-2026-56857, CVE-2026-56866, CVE-2026-78659, CVE-2026-78667, CVE-2026-94439, CVE-2026-94440, CVE-2026-97031, and CVE-2026-97032 ([8d515f75c](https://github.com/snyk/snyk/commit/8d515f75c67364d7a26f8ba1db4e95e3bdee4277))

## [1.1308.0](https://github.com/snyk/snyk/compare/v1.1307.4...v1.1308.0) (2026-10-08)

The Snyk CLI is being deployed to different deployment channels, users can select the stability level according to their needs. For details please see [this documentation](https://docs.snyk.io/snyk-cli/releases-and-channels-for-the-snyk-cli)

### Features

• **code, secrets**：`snyk code test` and `snyk secrets test` can now generate an HTML report. Use `--html` to print it to stdout, or `--html-file-output=<path>` to write it to a file. ([0e10434](https://github.com/snyk/snyk/commit/0e10434fdb632639177530b2bef62295a9dd5763), [af6a2a4](https://github.com/snyk/snyk/commit/af6a2a428cc3dc006871500ed6305f059d431c7b))
• **agent-scan**：The experimental `snyk agent-scan` command now reports risk indicators instead of issue codes. If you post-process its `--json` output, update your scripts to the new format. ([d5451a6](https://github.com/snyk/snyk/commit/d5451a6d1ec7521ddb1f4fa358c8dff24f8088b4))

### Bug Fixes

• **sbom**：Maven and Gradle SBOMs, and `--print-graph`, no longer stall on large multi-module builds. They now finish seconds after the build tool exits. On projects with dependency cycles, the output may contain extra `pruned: cyclic` placeholder nodes. No packages or dependency edges are dropped. ([73f038c](https://github.com/snyk/snyk/commit/73f038c6eaa546213f785824be42b4376b51215c))
• **test**：Gradle projects with very deep inter-module dependency chains no longer fail with a stack overflow. ([fc4f8ec](https://github.com/snyk/snyk/commit/fc4f8ec07f76e2bb5aecf290335af2f44c5658e8), [ce4e5d6](https://github.com/snyk/snyk/commit/ce4e5d6b0732e7e01c62f00aab5afc8f780c4baa))
• **test**：.NET scans fall back to legacy scanning when the .NET SDK isn't installed. They also handle projects restored in a different build directory, and work when global NuGet source-mapping rules are configured. ([b8461c8](https://github.com/snyk/snyk/commit/b8461c8c7198315b78f8feda23fd8ba3a4fd74aa))
• **test**：.NET scans no longer fail with `NU1101` on SDK installs that lack the app host pack, such as distro-packaged SDKs. ([1fd1fa4](https://github.com/snyk/snyk/commit/1fd1fa4894f6714b9693a382e4d0f89d6dfce092))
• **test**：.NET projects whose `PackageReference` uses a lowercase `version` attribute are now parsed correctly. ([108f8ca](https://github.com/snyk/snyk/commit/108f8caee97f87b112cf80d3b636d14d0a4648a9))
• **test**：Projects built with Gradle 4.0 to 4.6 no longer fail to scan. ([1070653](https://github.com/snyk/snyk/commit/107065335e6eec93d3c28f5c544ee435856d06a4))
• **deps**：Updates dependencies to fix vulnerabilities:
• CVE-2026-102276 ([8cfe5c7](https://github.com/snyk/snyk/commit/8cfe5c773b70ea4b9413bb31b37ca64ddccfdd19))
• CVE-2026-102278 ([8cfe5c7](https://github.com/snyk/snyk/commit/8cfe5c773b70ea4b9413bb31b37ca64ddccfdd19))
• CVE-2026-93748 ([c7378bc](https://github.com/snyk/snyk/commit/c7378bc227b08541adf9cfed990674db908021c5))
• CVE-2026-93750 ([c7378bc](https://github.com/snyk/snyk/commit/c7378bc227b08541adf9cfed990674db908021c5))

## [1.1307.4](https://github.com/snyk/snyk/compare/v1.1307.3...v1.1307.4) (2026-09-23)

The Snyk CLI is being deployed to different deployment channels, users can select the stability level according to their needs. For details please see [this documentation](https://docs.snyk.io/snyk-cli/releases-and-channels-for-the-snyk-cli)

### Features

• **studio**：New experimental `snyk studio` command that sets up Snyk Studio in your AI coding tools (Cursor, Claude Code, Codex, Copilot, Gemini, Kiro, Windsurf), so the code they generate gets scanned in the background as it's written. Run `snyk studio install --experimental` to get started. ([49653c8](https://github.com/snyk/snyk/commit/49653c889f0c2d812395e473194b278fce0e0512))
• **fix**：New `snyk fix --agentic` flags to narrow down what gets fixed: `--severity-filter` fixes only the listed severities, `--breakability-filter` fixes only Open Source upgrades with the listed breakability, and `--exclude-ids` fixes everything except the listed issue IDs. ([35298ae](https://github.com/snyk/snyk/commit/35298ae98f2b731bbfaddd7a0ee38c8bc1967168))
• **fix**：`snyk fix --agentic` now keeps a failed fix's changes by default so you can review them, and reports the fix as failed. Pass `--enable-revert` to roll the changes back automatically instead. ([35298ae](https://github.com/snyk/snyk/commit/35298ae98f2b731bbfaddd7a0ee38c8bc1967168))

### Bug Fixes

• **test**：`--iac`, `--docker`, `--container` and `--code` no longer get silently dropped for orgs on the unified test API — each now runs the correct scan again instead of an open-source test (which could fail with "No supported files found" or scan the wrong target). ([87568ab](https://github.com/snyk/snyk/commit/87568abd6fd55ae098f306634347b5cf300ab1fd))

## [1.1307.3](https://github.com/snyk/snyk/compare/v1.1307.2...v1.1307.3) (2026-09-17)

The Snyk CLI is being deployed to different deployment channels, users can select the stability level according to their needs. For details please see [this documentation](https://docs.snyk.io/snyk-cli/releases-and-channels-for-the-snyk-cli)

### Bug Fixes

• **test**：Reports an unreadable `.snyk` policy file as SNYK-POLICY-0002 with a message identifying the problem, instead of an unspecified error. ([4ada635](https://github.com/snyk/snyk/commit/4ada63568443e210c7b84d3f90c92bdb0421b3b9))
• **test**：`--all-projects` now resolves each project's `.snyk` policy from that project's own directory, instead of applying the scan root's policy to every project. ([f17550f](https://github.com/snyk/snyk/commit/f17550f96593f07f84f04f09b6eb93de1e344a1d))
• **test**：`--scan-all-unmanaged` no longer fails with exit code 2 when scanning a directory of JARs with no manifest file. (4f8643b)
• **deps**：Updates dependencies to fix vulnerabilities:
• CVE-2026-63376, CVE-2026-77465 ([b93aa46](https://github.com/snyk/snyk/commit/b93aa46efa7b226723198601bec3e9739c38683d))
• SNYK-JS-ADMZIP-19846655 ([97689ff](https://github.com/snyk/snyk/commit/97689ff9eac5fb323ad2f354532c94bebe1ee84f))

## [1.1307.2](https://github.com/snyk/snyk/compare/v1.1307.1...v1.1307.2) (2026-09-09)

The Snyk CLI is being deployed to different deployment channels, users can select the stability level according to their needs. For details please see [this documentation](https://docs.snyk.io/snyk-cli/releases-and-channels-for-the-snyk-cli)

### Bug Fixes

• **security**：Removed an unused experimental feature. ([ad487e9](https://github.com/snyk/snyk/commit/ad487e9c1d46da5b3448a6b48f464c0b26cb7c16))
• **deps**：Updates dependencies to fix vulnerabilities:
• CVE-2026-84445 ([b7aec1d](https://github.com/snyk/snyk/commit/b7aec1d6787ebb517b32edb8c0218e7ca20885b2))

## [1.1307.1](https://github.com/snyk/snyk/compare/v1.1307.0...v1.1307.1) (2026-09-07)

The Snyk CLI is being deployed to different deployment channels, users can select the stability level according to their needs. For details please see [this documentation](https://docs.snyk.io/snyk-cli/releases-and-channels-for-the-snyk-cli)

### Bug Fixes

• **test**：`snyk test` on a repository with no supported manifest files again reports `SNYK-CLI-0008` and exits 3, instead of a generic `SNYK-CLI-0000` with exit 2. `snyk test --json` writes the error document to stdout as expected. ([50cad38](https://github.com/snyk/snyk/commit/50cad38868eef07c68a8bf002f51edec90360151))
• **test**：Restores `moduleName`, `insights.triageAdvice`, and `functions_new` fields in `snyk test --json` output. ([4ec3d18](https://github.com/snyk/snyk/commit/4ec3d18904fe000bcc33a8bbc9ac85f9000c93d6))
• **test**：`.snyk` policy files are now handled correctly in the unified test flow -- empty, whitespace-only and comment-only policies, date-only timestamps, and other edge cases that previously caused incorrect results or failures. ([a22a563](https://github.com/snyk/snyk/commit/a22a5635f2cb119fdb676c786a10b1fd8cb8a804))
• **general**：Fixes a case where CLI commands that complete with findings (exit 1) could produce duplicate or corrupt JSON output when an unrelated network error occurred during the run. ([836ee0d](https://github.com/snyk/snyk/commit/836ee0db1bf3462ee8df227cecfe373c0cf282df))
• **general**：Fixes debug-log scrubber so that secrets are consistently masked and scrubbing no longer corrupts the surrounding JSON structure. ([d89333a](https://github.com/snyk/snyk/commit/d89333abc9765088faf50953f9e8ed4f8e65b2bf))
• **container**：Container scans now surface source repository information for locally built images using BuildKit metadata. ([dd6ff36](https://github.com/snyk/snyk/commit/dd6ff36ad2dbd433dda127d065d96e219dd3d146))
• **deps**：Updates dependencies to fix vulnerabilities:
• CVE-2022-25883 ([465d5f3](https://github.com/snyk/snyk/commit/465d5f3ac81fe330f152579f0e6a20217f2015b5))
• CVE-2026-84304 ([27f00a1](https://github.com/snyk/snyk/commit/27f00a172359cfad66d6b10c24f69a91b2eef8cc))
• CVE-2026-84375 ([5ceea33](https://github.com/snyk/snyk/commit/5ceea33da5e83f86957182b8b9eb3736d55909ae))
• SNYK-GOLANG-GOLANGORGXCRYPTOSSH-19504090 ([4ec3d18](https://github.com/snyk/snyk/commit/4ec3d18904fe000bcc33a8bbc9ac85f9000c93d6))

## [1.1307.0](https://github.com/snyk/snyk/compare/v1.1306.4...v1.1307.0) (2026-08-26)

The Snyk CLI is being deployed to different deployment channels, users can select the stability level according to their needs. For details please see [this documentation](https://docs.snyk.io/snyk-cli/releases-and-channels-for-the-snyk-cli)

### Features

• **agent**：New experimental `snyk agent` command — a scanning surface built for AI coding agents, with token-optimized output and ergonomics. `snyk agent test` runs Snyk Open Source, Code, and Secrets together. ([b98420c](https://github.com/snyk/snyk/commit/b98420c848338e9d94be17294d8d606f05ff8b84))
• **secrets**：`snyk secrets test` now supports exclusions — add files or paths to the `exclude` section of your `.snyk` file to skip them during secrets scanning. ([917bbc5](https://github.com/snyk/snyk/commit/917bbc54f729e7d3e1fa34657bbeb8f791b484fd))
• **container**：Container scans now surface image provenance attestations by default, so signed-image provenance metadata appears in results without any extra flag. ([0c444b0](https://github.com/snyk/snyk/commit/0c444b0112583ea3180027352f66a7922751cf06))
• **test**：Improves .NET/NuGet scanning — `snyk test` can now analyze already-restored projects fully offline and no longer requires .NET 6 to be installed. ([46cf92c](https://github.com/snyk/snyk/commit/46cf92c2c7f47af0348f912336113e0d8185fba7))
• **mcp**：The full MCP profile now includes Snyk Secrets. ([1d2848e](https://github.com/snyk/snyk/commit/1d2848e939100c24c338ede771ffcd1bde22d95c))
• **code, secrets**：SARIF suppressions now include `reviewedOn` and `reviewedBy` metadata. ([5585ea6](https://github.com/snyk/snyk/commit/5585ea65854b924cae7cc9cf8e0c57b880b840d4))
• **aibom**：`snyk aibom test --severity-threshold` now filters the displayed and JSON results by severity, not only the exit code. ([a429c2e](https://github.com/snyk/snyk/commit/a429c2e3f31aefd0f672d3629e46f71fd03414c5))

### Bug Fixes

• **test**：Adds support for scanning pnpm v11 `pnpm-lock.yaml` lockfiles. ([a75c5e0](https://github.com/snyk/snyk/commit/a75c5e0b21209e994f508c7ca9755592c7a24d69))
• **test**：Fixes a crash (`ConcurrentModificationException`) when scanning dependencies of Gradle 7.4–8.2 projects. ([a0e33f8](https://github.com/snyk/snyk/commit/a0e33f82bf660c358136d8a09c6804fb9529a8b0))
• **test**：Fixes scanning of projects using Hex versions newer than 1.19. ([479431a](https://github.com/snyk/snyk/commit/479431a1e9011261df2a812071e9c5289761d06f))
• **test**：Excludes the `.git` folder from file discovery, preventing intermittent scan failures caused by changes to `.git` contents during a scan. ([127db7d](https://github.com/snyk/snyk/commit/127db7df12f30fab4e57b534f592f9f54b8db896))(https://github.com/snyk/snyk/commit/15fb3a41a5c79edf5a5c4c430593e5237915f40e))
• **general**：Prevents a possible connection leak when the Snyk API returns an error response. ([8fd7d65](https://github.com/snyk/snyk/commit/8fd7d6544beab0fe609e823539e6373e058e7239))
• **deps**：Updates dependencies to fix vulnerabilities:
• CVE-2026-71557 ([fc6181f](https://github.com/snyk/snyk/commit/fc6181ff1807a95e4ab99b4ecf6e3b61e51d5a8b))
• Updates the Go runtime to address CVE-2026-46600, CVE-2026-56862, CVE-2026-56853, CVE-2026-56860, CVE-2026-56859, and CVE-2026-56858 ([1a1ed04](https://github.com/snyk/snyk/commit/1a1ed043d28875c71d2eabbd7c2ea87667e317dd))

1.1306.1 (2026-07-16)
The Snyk CLI is being deployed to different deployment channels, users can select the stability level according to their
needs. For details please see this documentation
Bug Fixes
• deps：Updates dependencies to fix vulnerabilities:
• CVE-2026-41907 (6775c1e)
• CVE-2026-13149,
CVE-2026-59869 (7673263)
• CVE-2026-59873,
CVE-2026-39244 (9bf7ce7)

1.1306.1 (2026-07-16)
The Snyk CLI is being deployed to different deployment channels, users can select the stability level according to their
needs. For details please see this documentation
Bug Fixes
• deps：Updates dependencies to fix vulnerabilities:
• CVE-2026-41907 (6775c1e)
• CVE-2026-13149,
CVE-2026-59869 (7673263)
• CVE-2026-59873,
CVE-2026-39244 (9bf7ce7)

1.1306.1 (2026-07-16)
The Snyk CLI is being deployed to different deployment channels, users can select the stability level according to their
needs. For details please see this documentation
Bug Fixes
• deps：Updates dependencies to fix vulnerabilities:
• CVE-2026-41907 (6775c1e)
• CVE-2026-13149,
CVE-2026-59869 (7673263)
• CVE-2026-59873,
CVE-2026-39244 (9bf7ce7)

1.1306.1 (2026-07-16)
The Snyk CLI is being deployed to different deployment channels, users can select the stability level according to their
needs. For details please see this documentation
Bug Fixes
- deps: Updates dependencies to fix vulnerabilities:
- CVE-2026-41907 (6775c1e)
- CVE-2026-13149,
CVE-2026-59869 (7673263)
- CVE-2026-59873,
CVE-2026-39244 (9bf7ce7)

1.1306.0 (2026-07-09)
The Snyk CLI is being deployed to different deployment channels, users can select the stability level according to their needs. For details please see this documentation
Features
- doctor: Adds the snyk doctor command to diagnose common CLI problems: generate a diagnostic report for the current system, or analyze debug log output. (ab56a0e)
- container: Container scans now detect the Java runtime version across a wider range of JVM base images, and can now find vulnerabilities in .NET application dependencies. (5586aac)
- mcp: The breakability evaluation tool in the Snyk MCP Server is now enabled by default and no longer requires an experimental flag. (56a9196)
- test: Improves dependency detection for Gradle projects. (c819b69)
- redteam: The experimental snyk redteam command has been removed from the CLI, following its deprecation (deprecation date May 31, 2026). (c7d0e3e)
Bug Fixes
- general: Shows a warning when a request is automatically retried due to rate limiting, instead of retrying silently. (f803397)
- general: Skips the reachability upload when no supported files are present, instead of failing. (9ba448c)
- test: Fixes dependency resolution for Swift Package Manager projects that reference packages by registry identity, so they're correctly matched to their GitHub source for vulnerability scanning. (64ac442)
- test: Fixes scanning of sbt projects with custom Scala configurations. (5765a12)
- test: Fixes a bug where scanning Yarn workspaces could report vulnerabilities from a workspace member's dev dependencies as if they were production dependencies, when that member was consumed by a sibling package. (ade08e4)
- deps: Updates dependencies to fix vulnerabilities:
- CVE-2026-41178 (a1d2e64)
- CVE-2026-5160 (b8a3659)
- CVE-2025-64718, CVE-2026-53550 (ed15dd8)
- CVE-2026-39822, CVE-2026-42505 (5b0e051)

1.1305.2 (2026-06-23)
Bug Fixes
- general: bump go version to 1.26.4 (4b97459)
- mcp: mcp logging and security fixes. (9734153)
- dependencies: Updates dependencies to fix vulnerabilities:
- CVE-2026-44705 (3094112), (26f933c)
- CVE-2026-45570 (b10f733)
- CVE-2026-49982 (26f933c)

1.1305.1 (2026-06-02)
Bug Fixes
- general: Improve retry behavior when rate limited by respecting the X-RateLimit-Reset header. (2e690df)
- deps: Updates dependencies to fix vulnerabilities:
- CVE-2026-39827 (e3816fc)
- CVE-2026-39831 (e3816fc)
- CVE-2026-33186 in IaC extensions (21b268b)

1.1305.0 (2026-05-20)
The Snyk CLI is being deployed to different deployment channels, users can select the stability level according to their needs. For details please see this documentation
Features
- sbom: Introduces the --allow-incomplete-sbom flag for snyk sbom, allowing the SBOM to be generated even when individual projects fail to resolve. Failed projects are surfaced as per-project errors alongside the successful results. (29ba128)
- container: Speed up snyk container monitor by sending dependency requests in parallel, configurable via the SNYK_REQUEST_CONCURRENCY environment variable. (186c5fb, 6764f65)
- general: Linux ARM64 and AMD64 binaries are now statically linked by default. (f02b850)
- mcp: Adds an experimental breakability evaluation tool to the Snyk MCP Server. (69806f5)
Bug Fixes
- test: Fixes resolution of aliased npm packages so the alias from the lockfile is used instead of the target package name. (9b0e4d9)
- test: Fixes parsing of Python .whl files when scanning projects with --all-projects. (12ac0db)
- deps: Updates dependencies to fix vulnerabilities:
- CVE-2026-34165 (1eec8f8)
- CVE-2026-33762 (1eec8f8)
- CVE-2025-62718 (0c4bdcc)
- CVE-2026-6321 (2670813)
- CVE-2026-6322 (2670813)

1.1304.3 (2026-05-13)
The Snyk CLI is being deployed to different deployment channels, users can select the stability level according to their needs. For details please see this documentation
Bug Fixes
- dependencies: Updates dependencies to fix vulnerabilities:
- CVE-2026-45022 (aa226a9)
- CVE-2026-33814 (1691c3b)
- CVE-2026-33811 (1691c3b)
- CVE-2026-39836 (1691c3b)

1.1304.2 (2026-05-06)
The Snyk CLI is being deployed to different deployment channels, users can select the stability level according to their needs. For details please see this documentation
Bug Fixes
- mcp: Add missing tools annotations (700d640)
- dependencies: Updates dependencies to fix vulnerabilities:
- SNYK-GOLANG-GITHUBCOMAWSAWSSDKGOV2AWSPROTOCOLEVENTSTREAM-16316402 (3706eda)
- SNYK-GOLANG-GITHUBCOMAWSAWSSDKGOV2SERVICES3-16316411 (3706eda)
- CVE-2026-39892 (7e03e4f)
- CVE-2026-33750 (8b9bec7)

1.1304.0 (2026-04-09)
The Snyk CLI is being deployed to different deployment channels, users can select the stability level according to their needs. For details please see this documentation
Features
- aibom: Introduces the snyk aibom test command. (2978044)
- test, monitor, sbom: Introduce --maven-skip-wrapper flag to force the use of a globally installed mvn command. (0ee90ca, ff31066)
- general: Introduce explicit configuration for network retry max-attempts. (1fbdf38)
- container: Add deprecation warnings for -shaded-jars-depth and non-numeric values for --nested-jars-depth. (321b6f5)
- container: Extend support for java runtime binary scanning (b60473a)
- mcp: Improves auto-enable behavior for Snyk Code, promotes package health checks to stable. (5f5898f)
- redteam: Adds a vulnerability summary to scanned output. (52eaf5a)
- redteam: Add --json flag support for list commands, exhaustive and eager modes. (e962c4d)
Bug Fixes
- general: Fix printing JSON output on stdout when only --json-file-output is specified. (32f65f0)
- test: Fixes an issue where no files were uploaded when using --skip-unresolved. (71ca761)
- test: Prevents scan failures when Maven builds succeed with non-fatal errors. (b30db97)
- test: Fixes Go PackageURL generation and import path normalization for projects using replace directives. (7c7a366, ee7d72b)
- test: Improves SDK detection when host and SDK versions differ. (96d0817)
- test: Ensures project names are populated when scanning NuGet projects from repository root. (c043553)
- container: Snyk Container scans of tar files on Windows should now report vulnerabilities for Python application package files. (9b86790)
- container: Override packages with inaccurate pom.properties files (b60473a)
- test: Ensure Yarn workspace pacakges matches are actual members defined in the root package.json. (0dd6581)
- test: Fix increased scan times when testing Golang projects. (f2f5ba2)
- code: Snyk Code scans now return clearer error message and exit codes when testing unsupported projects (6f5b4e3)
- test: Fix a bug where aliased packages were being resolved with the target name insted of the alias for yarn projects. (dcbec6f)
- test: Fix a bug where Python packages with . characters in their name were incorrectly parsed to include - characters. (9a2a36e)
- deps: Updates dependencies to fix vulnerabilities:
- CVE-2026-26996 (8e7873f)
- CVE-2026-29786 (1a08533)
- CVE-2026-31802 (1321575)
- CVE-2025-69873 (8ff6aad)
- CVE-2026-33186 (e98d9ef)
- CVE-2026-32283 (d26e83f)
- CVE-2026-29181 (f5418b6)

1.1303.2 (2026-03-23)
The Snyk CLI is being deployed to different deployment channels, users can select the stability level according to their needs. For details please see this documentation
Features
- redteam: Introducing Snyk Agent Red Teaming with attack profiles (fast, security, safety) via the new --profile flag, allowing users to select pre-configured sets of attack goals. (99e2953)
- redteam: New terminology for goals, strategies, and attacks to better describe Agent Red Teaming workflows. (99e2953)
- redteam: Tenant-based authentication using --tenant-id for routing Agent Red Teaming commands. (99e2953)
- redteam: Interactive wizard to guide users through Agent Red Teaming configuration and setup. (99e2953)
- container: Add Go stdlib vulnerability detection to container scans (aacdc53)
Bug Fixes
- test: Fixes a bug where the CLI repeatedly evaluated user privileges (feature flags) when scanning multiple Go projects.(d348cb7)
- test: Fixes a bug where scanning Go projects (with a replace directive pointing at a relative path) would fail due to badly formatted PackageURLs.(4c6b663)
- container: upgrade minimatch dependency to 3.1.3 (aacdc53)
- dependencies: Fix CVE-2026-33186 (f8a0602)
- dependencies: Fix CVE-2025-69873 (d240fcf)
- container: Fixes an issue where container scans of OCI archive images (including hybrid-format archives produced by Docker Desktop's containerd image store) could silently fail, returning exit code 0 with no vulnerability results. (4ad137f)

1.1303.1 (2026-03-04)
The Snyk CLI is being deployed to different deployment channels, users can select the stability level according to their needs. For details please see this documentation
Bug Fixes
- ui: Fixed an issue where JSON output was incorrectly printed to stdout when only --json-file-output was specified. (d6d465d)
- language-server: Fixed an issue where scans would not trigger when Snyk Code was enabled in IDE settings. (7567881)
- mcp: Fixed an issue where Snyk rules were not written locally. (7567881)

1.1303.0 (2026-02-26)
The Snyk CLI is being deployed to different deployment channels, users can select the stability level according to their needs. For details please see this documentation
Features
- iac: users can now exclude specific files and directories from IaC scans using the --exclude parameter (3acbc6b)
- test, sbom: --json output of snyk test and snyk sbom test should now contain fields which were previously missing (isDisputed, proprietary, severityBasedOn, alternativeIds, mavenModuleName) (9996b27)
- sbom: sbom generated output will contain maven/npm scope information for those organizations with the show-maven-build-scope/show-npm-scope feature flag enabled (89d26f0)
- aibom: users can now pass the --upload and --repo flag to the experimental aibom command to persist their AI BOM into their Snyk organisation (e1fdae7)
- redteam: users can now retrieve red team scan results using snyk redteam --experimental get --id=<scan-id>. The scan command also now shows progress during execution. (fba40cc)
- redteam: users can now return an HTML report via --html or --html-file-output flags (aa76c04)
- mcp: users can now use snyk_package_health to validate package health (2b0edd2)
- mcp: users can now use profiles to select which tools are registered based on their use case, profiles can be configured via CLI flag (--profile=<lite|full|experimental>) or environment variable (SNYK_MCP_PROFILE). (2b0edd2)
- mcp: users will now have their Secure At Inception rules written at the global level. (495a2e0)
- container: snyk container sbom users can now use --username and --password to generate SBOMs for images in private registries (a7015a7)
- container: snyk container sbom users can now use --exclude-node-modules to exclude node_modules directories from the SBOM (a7015a7)
- container: snyk container sbom users can now use --nested-jars-depth to control the depth of nested JAR unpacking (a7015a7)
- container: snyk container sbom users can now pass docker-archive:, oci-archive:, kaniko-archive: prefixed paths or bare .tar file paths as the image argument (a7015a7)
- dependencies: updated minimum go version to v1.25.7 (5927337)
Bug Fixes
- test correctly scan NuGet package names case-insensitively (44bf86b)
- test handle absolute target file paths for poetry (d902590)
- test: improved maven version detection for versions greater than 3.6.3 (87853a8)
- test: fixes an issue where the runAutomationDetails field in sarif output is not unique (07dd36f)
- test: the automationDetails field is now rendered correctly when using the --sarif flag (3191e4d)
- test: improve error reporting when using --all-projects (6e3b5d5)
- ignores: ignores created via the snyk ignore command are now correctly applied if an expiry is set or if using an absolute filepath (a61589c)
- container use correct projectName value in container monitor JSON output (0e8feca)
- container: the --target-reference option is now correctly applied to application scan results in container tests, not just the OS scan results (70db44f)
- container: reverts previously introduced stricter validation that was a breaking change (rejecting true as a valid numeric argument) (70db44f)
- network: fix a possible panic when TLS config is nil (f601681)
- language-server: fixes an issue around API URL construction (35800c1)
- ui: improve the readability of error messages (763ac26)
- ui: some SNYK-CLI-0000 errors are now correctly categorised and displayed (3d02788)
- dependencies: update dependencies to fix SNYK-JS-AXIOS-15252993 (1e80d74)
- dependencies: update dependencies to fix SNYK-GOLANG-GOOPENTELEMETRYIOOTELSDKRESOURCE-15182758 [IAC-3497] (4b3d826)
- dependencies: update dependencies to fix SNYK-JS-TAR-15307072 (fbc5cb4)
- dependencies: update dependencies to fix SNYK-JS-MINIMATCH-15309438 (8e7873f)
- dependencies: update dependencies to fix SNYK-GOLANG-GOLANGORGXCRYPTOSSH-14059803 and SNYK-GOLANG-GITHUBCOMULIKUNITZXZLZMA-12230262 [IAC-3478] (1d2d723)

1.1302.1 (2026-01-21)
The Snyk CLI is being deployed to different deployment channels, users can select the stability level according to their needs. For details please see this documentation
Bug Fixes
- code: Resolves FedRAMP URI construction in the IDE (35800c1)
- test: PackageURL validation failed with go.mod replace directive (SNYK-CLI-0000) for snyk test (7eb2978)
- sbom: PackageURL validation failed with go.mod replace directive (SNYK-CLI-0000) for snyk sbom (fda61e0)

1.1302.0 (2026-01-14)
The Snyk CLI is being deployed to different deployment channels, users can select the stability level according to their needs. For details please see this documentation
Features
- aibom: Improved Exit Code handling (d8fed82)
- container: Added support for OCI images with manifests missing platform fields (dae56aa)
- container: Added container scan support for cgo and stripped Go binaries (9b2ee6e)
- container: Added pnpm lockfile support (47db111)
- mcp-scan: Added experimental mcp-scan command (54b8376)
- sbom: Improved PackageURLs in SBOM documents for go.mod projects (c145efc)
- sbom test: Added support for deb, apk and rpm (9fd6f84)
- test: Added PackageURL information to go.mod dependency graphs (d90b54e)
- test: Added support for poetry development dependencies (6977004)
Bug Fixes
- container: Resolves false positive vulnerabilities for RHEL 10 container images (d4afe60)
- general: Upgraded multiple dependencies (e185c92)
- general: Fixed Exit Code handling when using incompatible glibc versions (66fbb50)
- general: Improved file filtering support with .gitignore (a16b853)
- mcp: Added rule file to .gitignore if not previously ignored (cc78694)
- test: Improved upload speed when using --reachability (da21315)
- test: Fixed npm v2 dependency resolution when using shadowing aliases (237a4f5)
- test: Fixed --exclude support for pnpm workspaces (293d9b1)
- test: Fixed SARIF output for Gradle projects to include the complete path in artifactLocation (ec1262e)

1.1301.2 (2025-12-16)
The Snyk CLI is being deployed to different deployment channels, users can select the stability level according to their needs. For details please see this documentation
Bug Fixes
- mcp: Fix MCP compliance issue (51d3f8d)

1.1301.1 (2025-12-08)
The Snyk CLI is being deployed to different deployment channels, users can select the stability level according to their needs. For details please see this documentation
Bug Fixes
- test: Rendering of fix advice for multiple dependency paths when using the reachability flag (eaf50bb)
- monitor: snyk monitor --reachability=true command should now work even if double dashed arguments are provided (e8bdac6)
- test, monitor: Code upload speed will be improved when running snyk test --reachability/snyk monitor --reachability (d0bdba1)
- language-server: Multiple Snyk Language Server related fixes (485ae55)
- dependencies: Upgrade dependencies to address multiple issues. (e185c92)

1.1301.0 (2025-11-12)
The Snyk CLI is being deployed to different deployment channels, users can select the stability level according to their needs. For details please see this documentation
Features
- container: The Snyk CLI now supports scanning Ubuntu Chisel images for vulnerabilities (9328757)
- container: The Snyk CLI now supports scanning container images with zstd-compressed layers (5080e42)
- container: Added a new parameter, --include-system-jars, to support scanning of usr/lib JARs (57078b6)
- test(maven): Initial maven 4 support, testing against the most recent release candidate (88cf47e)
- test(maven): A new experimental flag --include-provenance that will produce DepGraphs containing purls with checksum qualifiers for each package. Primarily to be used via --print-graph, not yet used in the main testing flow (5b8fe0a)
- sbom(maven): A new experimental flag --include-provenance that will produce an SBOM with checksum qualifiers in each purl (5b8fe0a)
- language-server: A new feature flag service to manage feature flags on a per-organization basis. This allows for more granular control over feature rollouts and enables fetching feature flags directly from the folder configuration. (2cc554e)
Bug Fixes
- general: Fix incorrect error mapping for varying status codes (5829500)
- general: Some invalid flag combinations are now correctly handled (ca5903b)
- test: The Snyk CLI now correctly handles optional dependencies without separate package entries
(bfcbda7)
- test: The Snyk CLI now correctly handles aliased packages with nested dependencies (bfcbda7)
- test: The Snyk CLI now correctly handles bundled dependencies with non-hoisted bundle owners (bfcbda7)
- test: Fixes issue where sub packages were getting grouped incorrectly, leading to deps getting marked as missing. (b904e8c)
- test, sbom: Stops misclassifying NX Build project.json as a NuGet project (ff6860f)
- test(npm): Improve npm alias support (cb37da7)
- test(npm): The Snyk CLI now correctly handles npm packages with bundled dependencies (7d93b86)
- test(python): Scanning projects using Python 2.7 will no longer fail with a string formatting error (4effc7f)
- test(python): Fixed JSON parsing error for Python projects with missing packages (4effc7f)
- test(maven): Underlying maven commands adjusted slightly to make aggregate projects that encounter issues when rebuilding more likely to succeed (3b72d86)
- test(dotnet): Fix an issue with NuGet v3 scanner where the netstandard and netcoreapp TargetFrameworks were treated as .netx.x (227b50c)
- test(dotnet): Fix an issue with NuGet v3 scanner where the pinned dependencies were not discovered (0d9b0c4)
- container: Fixed a bug where scanning docker images with very large files would result in the CLI crashing with no message (57078b6)
- container: Fix rare crash when scanning large Docker images (195ed78)
- container: Fix issue where go binaries in Linux images with complex paths were not properly detected as go binaries when scanning on Windows (be8098b)
- code: Add missing explicit error handling (755d01f)
- unmanaged: Ignored vulnerabilities in unmanaged (C/C++) projects are now properly excluded from JSON output when using .snyk policy files. This ensures that snyk-to-html and other tools that consume JSON output will correctly respect vulnerability ignores. (fa808c1)
- dependencies: Fix CVE-2025-58058 and CVE-2025-11065 (d7e87e2)
- dependencies: Upgrade golang to 1.24.10 to fix vulnerabilities (c039f99)
- dependencies: Upgrade to golang 1.24.8 (4dcf97a)
- dependencies: Upgrade xcode to avoid flaky signing (bdcb991)
- dependencies: Fix CVE-2025-47913 (a00b0dc)
- language-server: Various Language Server related fixes (2cc554e)

1.1300.2 (2025-10-28)
The Snyk CLI is being deployed to different deployment channels, users can select the stability level according to their needs. For details please see this documentation
Bug Fixes
- security: Upgrades dependencies to address CVE-2025-47913 (d7e87e2)
- general: Improved error messaging (5d16466)

1.1300.1 (2025-10-21)
The Snyk CLI is being deployed to different deployment channels, users can select the stability level according to their needs. For details please see this documentation
Features
- mcp: Added support for the MCP server to use IDE extension storage when running in VS Code (7f26dc6)
- redteam: Added a new experimental AI Red Teaming feature, read more: https://docs.snyk.io/developer-tools/snyk-cli/commands/ai-red-teaming (fe37e0f)
Bug Fixes
- test: Fix issue where npm aliases only detected the latest version of a dependency (cb37da7)
- security: Upgrades dependencies to address CVE-2025-58058 and CVE-2025-11065 (d7e87e2)
- general: Improved error messaging (5d16466)
- logging: Remove support for legacy DEBUG environment variable. For the supported debugging options, please check https://docs.snyk.io/developer-tools/snyk-cli/debugging-the-snyk-cli (2087f74)

1.1300.0 (2025-10-08)
The Snyk CLI is being deployed to different deployment channels, users can select the stability level according to their needs. For details please see this documentation
Features
- general: Improve SARIF compatibility by adding runAutomationDetails (3e232e5)
- container: Add support scanning system JARs (54e84d8)
- container: Add TargetOS to output of container scan (aa55cd9)
- test: Add support for godot projects (d9fc200)
- test: Add support for maven metaversions (f321ffa)
- language-server: Add CVSSv4 Links in IDE Issue Details
- mcp: Workflow and performance improvements
Bug Fixes
- container: Fixed crashes when scanning docker images with very large files (72cb040)
- test: Re-enable support for python 2.7 (02c7fe3)
- test: Improved error information when using --all-projects (36d14f9)
- test: Fix a bug due to case-sensitive ignores (b432406)
- test: Resolve project assets file path dynamically (75a152e)
- iac: Upgrade iac components to address a vulnerability [IAC-3439] (eaaaf84)
- logging: Fix broken debug logs due to secret redaction by redacting all user input (0cf19a7)
- language-server: Multiple bugfixes

1.1299.1 (2025-09-24)
The Snyk CLI is being deployed to different deployment channels, users can select the stability level according to their needs. For details please see this documentation
Bug Fixes
- language-server: Fix titles of Snyk Open Source code actions in IDEs (0add44d)
- code: Include missing uploadResults property in Sarif output (693e548)
- logging: Fix broken debug logs due to incorrect redaction (0cf19a7)

1.1299.0 (2025-08-28)
The Snyk CLI is being deployed to different deployment channels, users can select the stability level according to their needs. For details please see this documentation.
Features
- auth: Support for PAT auto region configuration. (ad8e4a7)
Bug Fixes
- code: Fixes code test --report when a project_id environment variable exists. (6168b1d)
- code: Fixes an issue with snyk code test where an empty input parameter would cause inconsistent behavior. (a661235)
- container: Stops spawning commands using a shell. (7ee9e15)
- dependency: Fixes CVE-2025-8959. (5a548fb)
- general: Fixes a bug where formatting of log timestamps could cause a crash in some cases. (92fa8be)
- iac: Fixes wrong status code checks. (77152e5)
- language-server: Fixes a bug related to the analytics environment variables. (6916af8)
- language-server: Correctly populates the environment for Open Source scans when called from the IDE. (945b029)
- language-server: Ensures changed API URLs are respected during authentication. (24ed981)
- language-server: MCP tool updates to support feedback and better tool descriptions. (8f2a8d1)
- test: Fixes a bug where project.assets.json files would not be detected in cases where it's destination path was altered with .NET properties. (75a152e)
- test: Improves error messages when using --all-projects. (960fa8e)

1.1298.3 (2025-08-14)
The Snyk CLI is being deployed to different deployment channels, users can select the stability level according to their needs. For details please see this documentation
News
- Effective with release (Snyk CLI 1.1298.0), the minimum required GNU C Library (glibc) versions on Linux will be updated as follows:
- For Linux x64 environments: glibc version 2.28 or higher
- For Linux arm64 environments: glibc version 2.31 or higher
- If this affects you, please follow the advice here. Possible issues are errors mentioning GLIBC_2.27 or GLIBC_2.31 not found.
Bug Fixes
- aibom This command is now publicly available. Note that the feature is still experimental and subject to breaking changes without notice.
- test Added support for Gradle 9.

1.1298.2 (2025-07-30)
The Snyk CLI is being deployed to different deployment channels, users can select the stability level according to their needs. For details please see this documentation
News
- Effective with release (Snyk CLI 1.1298.0), the minimum required GNU C Library (glibc) versions on Linux will be updated as follows:
- For Linux x64 environments: glibc version 2.28 or higher
- For Linux arm64 environments: glibc version 2.31 or higher
- If this affects you, please follow the advice here. Possible issues are errors mentioning GLIBC_2.27 or GLIBC_2.31 not found.
Bug Fixes
- code: Fix code test --report when a project_id environment variable exists (8be17d6)
- mcp: Skip trust browser popup if folder is already trusted
- mcp: Improve container scan security
- language-server: Fixed missing AI Fix entitlements for cases where the default org didn’t have AI Fix enabled

1.1298.1 (2025-07-22)
The Snyk CLI is being deployed to different deployment channels, users can select the stability level according to their needs. For details please see this documentation
News
- Effective with release (Snyk CLI 1.1298.0), the minimum required GNU C Library (glibc) versions on Linux will be updated as follows:
- For Linux x64 environments: glibc version 2.28 or higher
- For Linux arm64 environments: glibc version 2.31 or higher
- If this affects you, please follow the advice here. Possible issues are errors mentioning GLIBC_2.27 or GLIBC_2.31 not found.
Bug Fixes
- container: Fix failing scan of local container images (6095a60)
- mcp: Fix incomplete mcp instrumentation (9108dc0)

1.1298.0 (2025-07-10)
The Snyk CLI is being deployed to different deployment channels, users can select the stability level according to their needs. For details please see this documentation
News
- Effective with this release (Snyk CLI 1.1298.0), the minimum required GNU C Library (glibc) versions on Linux will be updated as follows:
- For Linux x64 environments: glibc version 2.28 or higher
- For Linux arm64 environments: glibc version 2.31 or higher
Features
- language-server: Introduce a folder trust mechanism for the MCP extension (e8fe9f8)
- language-server: Allow command cancelling for login command (e8fe9f8)
- language-server: Support Snyk personal access tokens as an authentication method for IDEs (5ccabc9)
- language-server: IAW UI improvements (8cd643d)
- test, monitor, sbom: Maven Dverbose improvement for long running scans resulting from dense dependency graphs creation (5abe28b)
- test: Improved support for comments in Dotnet's global.json file (164618c)
- test: NPM/Yarn alias are now supported and honored by default. (beb9fcc)
- test: Node IDs in the dep-graph produced by snyk test --print-graph will now contain type and classifier (22ba468)
- test: Use SNYK_TMP_PATH env var for temp dir path for Python tests (3ba01d1)
- test: For gradle projects, internal project dependencies containing multiple artifacts disguised under one artifact should now show all dependencies instead of randomly picking one of the dependencies grouped under the disguised coordinate when scanned via snyk test --gradle-normalize-deps (22ba468)
- auth: Support Snyk personal access tokens as an authentication method for the CLI (217aa3e)
- aibom: Added aibom extension (58e5143)
- aibom: Support optional html rendering when using --html (dd4de81)
- container: Add support for RPM packages scanning in SLE15.2+ images (c5e3a03)
Bug Fixes
- general: Fixes incorrect SARIF schema link for Code, Container, IAC and Open Source product line output (f283dd9)
- language-server: MCP tool description and params (bb88287)
- language-server: Update IAW wording to match web UI (bb88287)
- language-server: General MCP extension improvements (e8fe9f8)
- language-server: Make sure parsing of issues does not end prematurely for unmanaged scans (01f53e3)
- language-server: AI fix applying to the wrong lines (01f53e3)
- language-server: Display inline ignores, if feature flag is set in VSCode (01f53e3)
- language-server: OAuth flow should use GAF network HTTP Client (9c36d43)
- language-server: Add snyk-ls- prefix to x-snyk-ide header (9c36d43)
- language-server: Parameter precedence for SCA scans (9c36d43)
- language-server: AIFix loads folder path from cached issues instead of computing it (72dd095)
- language-server: Potential cross-site scripting (XSS) vulnerability in the HTML reports generated by the IaC scanning infrastructure (72dd095)
- language-server: Ignored OSS issues are not propagated to the client (72dd095)
- language-server: Workspace folder trust validation failure on case-insensitive filesystems (Windows and macOS) when comparing paths with different letter casing (72dd095)
- langauge-server: Read locks when running auth command (420d62a)
- language-server: Authentication command is now cancellable (35eb9a8)
- language-server: MCP command for SCA (c6f1203)
- language-server: Send auth analytics when token updated (6916af8)
- test, monitor, sbom: Maven Dverbose algorithm adds only the dependencies resolved by maven in the dependency graph/sbom (9b6abd3)
- test, monitor, sbom: -- -Dverbose affecting scope collisions from the maven Dverbose command output (parentNodeId does not exist error). (0a48b96)
- test, monitor: Misleading OutOfSync error in npm projects for top-level bundled dependencies (8ac67c6)
- test, monitor: Misleading OutOfSync error in yarn projects with multiple versions for the same dependency (8ac67c6)
- test, monitor: Fixes error in pip scans when a remote requirement matched the name of local directory (c196bae)
- test: Imports 

1.1297.3 (2025-06-23)
The Snyk CLI is being deployed to different deployment channels, users can select the stability level according to their needs. For details please see this documentation
Bug Fixes
- logging: Improves the sanitization of credentials in local debug logs. (38322f3)

1.1297.2 (2025-06-16)
The Snyk CLI is being deployed to different deployment channels, users can select the stability level according to their needs. For details please see this documentation
Bug Fixes
- logging: Improves the sanitization of credentials in local debug logs. (e054455)
- language-server: IDE Connectivity for Proxy Users: Fixes an issue where IDE plugins could fail to connect when operating behind an NTLM proxy.
- language-server: Snyk Code Local Engine Fix: Addresses a regression that prevented the Snyk Code Local Engine (SCLE) from functioning correctly within the IDEs.

1.1297.1 (2025-05-16)
The Snyk CLI is being deployed to different deployment channels, users can select the stability level according to their needs. For details please see this documentation
Bug Fixes
- test: Rollbacked a regression introduced by a change in gradle module resolution in version 1.1297.0 (7991133)

1.1297.0 (2025-05-14)
The Snyk CLI is being deployed to different deployment channels, users can select the stability level according to their needs. For details please see this documentation
Features
- container: Support scanning container images from tar files without specifying a type (58b0861)
- iac: Improve IaC deployment to avoid on the fly downloads (5108f58)
- sbom: Introduce sbom monitor command (24e96c3)
- test: Improve gradle module resolution (7991133)
- language-server: Introduce explanation of AI fixes in IDEs (74fa322)
Bug Fixes
- container: Fix issue when scanning invalid node manifest files (ceb8020)
- code: Fix hash mismatches for files containing non-UTF-8 content (33d33e9)
- iac: Ensure to use the correct org id when sharing results for v2 (1c4094a)
- iac: Ensure to use target-name (2201f0a)
- sbom: Fix issues when generating sboms based on NuGet .sln (80c43d9)
- test: Fix issues when scanning gradle projects on Windows (11586cc)
- test: Improve error messages when using fail-fast, all-projects and json (a396bd6)
- test: Fix yarn 2 out of sync issues (18aee45)
- test: Fix pnpm out of sync issue for duplicated peer and dev dependencies (2581e16)
- test: Ensure internal dependencies are represented correctly when normalizing Gradle dependencies (c7e2713)
- test: Fix testing composer-based PHP projects (39e3379)
- language-server: Fix and improve issue filtering in IDEs (a474d67)
- language-server: Fix unmanaged C/C++ scans with '—unmanaged' flag in additional parameters (01f53e3)
- language-server: Fix applying Snyk Code AI fixes on the wrong lines (01f53e3)

1.1296.2 (2025-04-16)
The Snyk CLI is being deployed to different deployment channels, users can select the stability level according to their needs. For details please see this documentation
News
- mcp: Add experimental Model Context Protocol server for agentic workflow support (3b5f494)
Bug Fixes
- general: Fix OAuth authentication issues (b2684db)
- code: Write JSON/SARIF files when nested directories do not exist (faca897)
- test: Clearer error messages when testing multiple projects with fail-fast (a396bd6)

1.1296.1 (2025-03-27)
The Snyk CLI is being deployed to different deployment channels, users can select the stability level according to their needs. For details please see this documentation
News
- test: Add poetry v2 support (49c6652)
- code: Fix backward compatibility issue in sarif driver name (5ef6442)
- iac: Fix iac test network issues (815ed82)
- language-server: Increase authentication resilience (07fc381)
- language-server: Avoid that the trust dialog blocks the application. (07fc381)
- language-server: Fix duplicate Open Source Issues appearing only in a single IDE tree node, despite occurring in multiple files. (07fc381)
- dependency: Upgrade golang.org/x/net to address CVE-2025-22870 (7edd450)