Skip to content

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Sep 8, 2025

Bumps snyk from 1.1292.1 to 1.1299.0.

Release notes

Sourced from snyk's releases.

v1.1299.0

1.1299.0 (2025-08-28)

The Snyk CLI is being deployed to different deployment channels, users can select the stability level according to their needs. For details please see this documentation.

Features

  • auth: Support for PAT auto region configuration. (ad8e4a7)

Bug Fixes

  • code: Fixes code test --report when a project_id environment variable exists. (6168b1d)
  • code: Fixes an issue with snyk code test where an empty input parameter would cause inconsistent behavior. (a661235)
  • container: Stops spawning commands using a shell. (7ee9e15)
  • dependency: Fixes CVE-2025-8959. (5a548fb)
  • general: Fixes a bug where formatting of log timestamps could cause a crash in some cases. (92fa8be)
  • iac: Fixes wrong status code checks. (77152e5)
  • language-server: Fixes a bug related to the analytics environment variables. (6916af8)
  • language-server: Correctly populates the environment for Open Source scans when called from the IDE. (945b029)
  • language-server: Ensures changed API URLs are respected during authentication. (24ed981)
  • language-server: MCP tool updates to support feedback and better tool descriptions. (8f2a8d1)
  • test: Fixes a bug where project.assets.json files would not be detected in cases where it's destination path was altered with .NET properties. (75a152e)
  • test: Improves error messages when using --all-projects. (960fa8e)

v1.1298.3

1.1298.3 (2025-08-14)

The Snyk CLI is being deployed to different deployment channels, users can select the stability level according to their needs. For details please see this documentation

News

  • aibom: This command is now publicly available. Note that the feature is still experimental and subject to breaking changes without notice.

  • Effective with release (Snyk CLI 1.1298.0), the minimum required GNU C Library (glibc) versions on Linux will be updated as follows:

    • For Linux x64 environments: glibc version 2.28 or higher
    • For Linux arm64 environments: glibc version 2.31 or higher
  • If this affects you, please follow the advice here. Possible issues are errors mentioning GLIBC_2.27 or GLIBC_2.31 not found.

Bug Fixes

  • test: Added support for Gradle 9.

v1.1298.2

1.1298.2 (2025-07-30)

The Snyk CLI is being deployed to different deployment channels, users can select the stability level according to their needs. For details please see this documentation

News

  • Effective with release (Snyk CLI 1.1298.0), the minimum required GNU C Library (glibc) versions on Linux will be updated as follows:

... (truncated)

Commits
  • 2c059ca Merge pull request #6148 from snyk/dotkas/final-cherry-picks
  • 0046eaa chore: skip sbom reachability user journey test
  • ce9a5fe fix: Fix reduced configuration cache usage
  • 48a8b5c chore(ci): update CICD experimental_cli_download_base_url parameter
  • 07f63bb fix: upgrade to go 1.24.6
  • 31a00fb Merge pull request #6140 from snyk/dotkas/more-cherrypicks
  • decf770 fix: conforming the way we take precedence of auth config values
  • acf2d67 Merge pull request #6129 from snyk/dotkas/cherry-picks-for-release-candidate
  • 24fee58 fix: fixing host auto-detection bug in snyk auth
  • 6a782d1 feat: add linux static experimental binary
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [snyk](https://github.com/snyk/snyk) from 1.1292.1 to 1.1299.0.
- [Release notes](https://github.com/snyk/snyk/releases)
- [Commits](snyk/cli@v1.1292.1...v1.1299.0)

---
updated-dependencies:
- dependency-name: snyk
  dependency-version: 1.1299.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Sep 8, 2025
Copy link
Contributor Author

dependabot bot commented on behalf of github Sep 29, 2025

Superseded by #90.

@dependabot dependabot bot closed this Sep 29, 2025
@dependabot dependabot bot deleted the dependabot/npm_and_yarn/snyk-1.1299.0 branch September 29, 2025 02:47
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants