v1.1300.1

Compare Source

The Snyk CLI is being deployed to different deployment channels, users can select the stability level according to their needs. For details please see this documentation

Features

• mcp: Added support for the MCP server to use IDE extension storage when running in VS Code (7f26dc6)
• redteam: Added a new experimental AI Red Teaming feature, read more: https://docs.snyk.io/developer-tools/snyk-cli/commands/ai-red-teaming (fe37e0f)

Bug Fixes

• test: Fix issue where npm aliases only detected the latest version of a dependency (cb37da7)
• security: Upgrades dependencies to address CVE-2025-58058 and CVE-2025-11065 (d7e87e2)
• general: Improved error messaging (5d16466)
• logging: Remove support for legacy DEBUG environment variable. For the supported debugging options, please check https://docs.snyk.io/developer-tools/snyk-cli/debugging-the-snyk-cli (2087f74)

v1.1300.0

Compare Source

The Snyk CLI is being deployed to different deployment channels, users can select the stability level according to their needs. For details please see this documentation

Features

• general: Improve SARIF compatibility by adding runAutomationDetails (3e232e5)
• container: Add support scanning system JARs (54e84d8)
• container: Add TargetOS to output of container scan (aa55cd9)
• test: Add support for godot projects (d9fc200)
• test: Add support for maven metaversions (f321ffa)
• language-server: Add CVSSv4 Links in IDE Issue Details
• mcp: Workflow and performance improvements

Bug Fixes

• container: Fixed crashes when scanning docker images with very large files (72cb040)
• test: Re-enable support for python 2.7 (02c7fe3)
• test: Improved error information when using --all-projects (36d14f9)
• test: Fix a bug due to case-sensitive ignores (b432406)
• test: Resolve project assets file path dynamically (75a152e)
• iac: Upgrade iac components to address a vulnerability [IAC-3439] (eaaaf84)
• logging: Fix broken debug logs due to secret redaction by redacting all user input (0cf19a7)
• language-server: Multiple bugfixes

v1.1299.1

Compare Source

The Snyk CLI is being deployed to different deployment channels, users can select the stability level according to their needs. For details please see this documentation

Bug Fixes

• language-server: Fix titles of Snyk Open Source code actions in IDEs (0add44d)
• code: Include missing uploadResults property in Sarif output (693e548)
• logging: Fix broken debug logs due to incorrect redaction (0cf19a7)

v1.1299.0

Compare Source

The Snyk CLI is being deployed to different deployment channels, users can select the stability level according to their needs. For details please see this documentation.

Features

• auth: Support for PAT auto region configuration. (ad8e4a7)

Bug Fixes

• code: Fixes code test --report when a project_id environment variable exists. (6168b1d)
• code: Fixes an issue with snyk code test where an empty input parameter would cause inconsistent behavior. (a661235)
• container: Stops spawning commands using a shell. (7ee9e15)
• dependency: Fixes CVE-2025-8959. (5a548fb)
• general: Fixes a bug where formatting of log timestamps could cause a crash in some cases. (92fa8be)
• iac: Fixes wrong status code checks. (77152e5)
• language-server: Fixes a bug related to the analytics environment variables. (6916af8)
• language-server: Correctly populates the environment for Open Source scans when called from the IDE. (945b029)
• language-server: Ensures changed API URLs are respected during authentication. (24ed981)
• language-server: MCP tool updates to support feedback and better tool descriptions. (8f2a8d1)
• test: Fixes a bug where project.assets.json files would not be detected in cases where it's destination path was altered with .NET properties. (75a152e)
• test: Improves error messages when using --all-projects. (960fa8e)

v1.1298.3

Compare Source

The Snyk CLI is being deployed to different deployment channels, users can select the stability level according to their needs. For details please see this documentation

News

• aibom: This command is now publicly available. Note that the feature is still experimental and subject to breaking changes without notice.

• Effective with release (Snyk CLI 1.1298.0), the minimum required GNU C Library (glibc) versions on Linux will be updated as follows:

  • For Linux x64 environments: glibc version 2.28 or higher
  • For Linux arm64 environments: glibc version 2.31 or higher

• If this affects you, please follow the advice here. Possible issues are errors mentioning GLIBC_2.27 or GLIBC_2.31 not found.

Bug Fixes

• test: Added support for Gradle 9.