Skip to content

Commit ff87b55

Browse files
authored
Merge pull request #6610 from snyk/release-candidate
chore: release hotfix v1.1301.3
2 parents 2a5adb9 + 9047290 commit ff87b55

5 files changed

Lines changed: 25 additions & 51 deletions

File tree

binary-releases/RELEASE_NOTES.md

Lines changed: 4 additions & 38 deletions
Original file line numberDiff line numberDiff line change
@@ -1,43 +1,9 @@
1-
## [1.1303.0](https://github.com/snyk/snyk/compare/v1.1302.1...v1.1303.0) (2026-02-26)
1+
## [1.1303.1](https://github.com/snyk/snyk/compare/v1.1303.0...v1.1303.1) (2026-03-04)
22

33
The Snyk CLI is being deployed to different deployment channels, users can select the stability level according to their needs. For details please see [this documentation](https://docs.snyk.io/snyk-cli/releases-and-channels-for-the-snyk-cli)
44

5-
### Features
6-
7-
* **iac:** users can now exclude specific files and directories from IaC scans using the `--exclude` parameter ([3acbc6b](https://github.com/snyk/snyk/commit/3acbc6b81ed88ef5ba999ba40dd8642eba7e011a))
8-
* **test, sbom:** `--json` output of `snyk test` and `snyk sbom test` should now contain fields which were previously missing (`isDisputed`, `proprietary`, `severityBasedOn`, `alternativeIds`, `mavenModuleName`) ([9996b27](https://github.com/snyk/snyk/commit/9996b276b5334f2eaebceff7bc284740ad1ad968))
9-
* **sbom:** sbom generated output will contain maven/npm scope information for those organizations with the `show-maven-build-scope/show-npm-scope` feature flag enabled ([89d26f0](https://github.com/snyk/snyk/commit/89d26f0372dc51840e86a0866339458d4b6abc92))
10-
* **aibom:** users can now pass the `--upload` and `--repo` flag to the experimental aibom command to persist their AI BOM into their Snyk organisation ([e1fdae7](https://github.com/snyk/snyk/commit/e1fdae7acfb1802fc9d2d897d133a406503df629))
11-
* **redteam:** users can now retrieve red team scan results using `snyk redteam --experimental get --id=<scan-id>`. The scan command also now shows progress during execution. ([fba40cc](https://github.com/snyk/snyk/commit/fba40ccd8bb546756609ccb9fb27b242f40158e9))
12-
* **redteam:** users can now return an HTML report via `--html` or `--html-file-output` flags ([aa76c04](https://github.com/snyk/snyk/commit/aa76c04988e51603d6d07509d2ac24a8048174b4))
13-
* **mcp:** users can now use `snyk_package_health` to validate package health ([2b0edd2](https://github.com/snyk/snyk/commit/2b0edd26877b37e5841857df0b29875a3da9dd9d))
14-
* **mcp:** users can now use profiles to select which tools are registered based on their use case, profiles can be configured via CLI flag (`--profile=<lite|full|experimental>`) or environment variable (`SNYK_MCP_PROFILE`). ([2b0edd2](https://github.com/snyk/snyk/commit/2b0edd26877b37e5841857df0b29875a3da9dd9d))
15-
* **mcp:** users will now have their Secure At Inception rules written at the global level. ([495a2e0](https://github.com/snyk/snyk/commit/495a2e0b909fdfe71a39a8e7062b38241cd1c1bb))
16-
* **container:** `snyk container sbom` users can now use `--username` and `--password` to generate SBOMs for images in private registries ([a7015a7](https://github.com/snyk/snyk/commit/a7015a77dbe2db9b8dfec1a7a5433d789f688680))
17-
* **container:** `snyk container sbom` users can now use `--exclude-node-modules` to exclude node_modules directories from the SBOM ([a7015a7](https://github.com/snyk/snyk/commit/a7015a77dbe2db9b8dfec1a7a5433d789f688680))
18-
* **container:** `snyk container sbom` users can now use `--nested-jars-depth` to control the depth of nested JAR unpacking ([a7015a7](https://github.com/snyk/snyk/commit/a7015a77dbe2db9b8dfec1a7a5433d789f688680))
19-
* **container:** `snyk container sbom` users can now pass `docker-archive:`, `oci-archive:`, `kaniko-archive:` prefixed paths or bare `.tar` file paths as the image argument ([a7015a7](https://github.com/snyk/snyk/commit/a7015a77dbe2db9b8dfec1a7a5433d789f688680))
20-
* **dependencies:** updated minimum go version to v1.25.7 ([5927337](https://github.com/snyk/snyk/commit/5927337292351af73843ec96e1f5a0a82ec4fc65))
21-
22-
235
### Bug Fixes
246

25-
* **test** correctly scan NuGet package names case-insensitively ([44bf86b](https://github.com/snyk/snyk/commit/44bf86baa4783a58477622255714d3a983174ca1))
26-
* **test** handle absolute target file paths for poetry ([d902590](https://github.com/snyk/snyk/commit/d9025909e7e281743f1e82bed5116dcd74d0c3d1))
27-
* **test:** improved maven version detection for versions greater than 3.6.3 ([87853a8](https://github.com/snyk/snyk/commit/87853a8b5961290c7e89017390c0ae3c80607416))
28-
* **test:** fixes an issue where the `runAutomationDetails` field in sarif output is not unique ([07dd36f](https://github.com/snyk/snyk/commit/07dd36fdba4ad884b36536af31778fd27f9321a0))
29-
* **test:** the `automationDetails` field is now rendered correctly when using the `--sarif` flag ([3191e4d](https://github.com/snyk/snyk/commit/3191e4df624cd4dda6a1f1d912124394e9981926))
30-
* **test:** improve error reporting when using `--all-projects` ([6e3b5d5](https://github.com/snyk/snyk/commit/6e3b5d533530da2d24cce6a17d55d8a4bae240eb))
31-
* **ignores:** ignores created via the `snyk ignore` command are now correctly applied if an expiry is set or if using an absolute filepath ([a61589c](https://github.com/snyk/snyk/commit/a61589c4206317497fb5853e1bdcdca7c2973a4a))
32-
* **container** use correct projectName value in container monitor JSON output ([0e8feca](https://github.com/snyk/snyk/commit/0e8feca01832318a1fd03a9d06a6a5e7f8024115))
33-
* **container:** the `--target-reference` option is now correctly applied to application scan results in container tests, not just the OS scan results ([70db44f](https://github.com/snyk/snyk/commit/70db44fd8c783baf23417cf22d091fdb2355e8e9))
34-
* **container:** reverts previously introduced stricter validation that was a breaking change (rejecting true as a valid numeric argument) ([70db44f](https://github.com/snyk/snyk/commit/70db44fd8c783baf23417cf22d091fdb2355e8e9))
35-
* **network:** fix a possible panic when TLS config is nil ([f601681](https://github.com/snyk/snyk/commit/f6016812dcb8f15d5f020b9134214cbeee5b4927))
36-
* **language-server:** fixes an issue around API URL construction ([35800c1](https://github.com/snyk/snyk/commit/35800c10aea0807a04baf4e6eafa2bf5f9f3c991))
37-
* **ui:** improve the readability of error messages ([763ac26](https://github.com/snyk/snyk/commit/763ac26ec12a6cdcaa0a0176727e40aa2c31797b))
38-
* **ui:** some `SNYK-CLI-0000` errors are now correctly categorised and displayed ([3d02788](https://github.com/snyk/snyk/commit/3d02788d71f0adb4f883a9baccd413faf5fd016c))
39-
* **dependencies:** update dependencies to fix SNYK-JS-AXIOS-15252993 ([1e80d74](https://github.com/snyk/snyk/commit/1e80d7454b85ebede70be09da1f6a40c88b5d4a1))
40-
* **dependencies:** update dependencies to fix SNYK-GOLANG-GOOPENTELEMETRYIOOTELSDKRESOURCE-15182758 [IAC-3497] ([4b3d826](https://github.com/snyk/snyk/commit/4b3d826694d759d7ae892ff6ff824ffdbae32af1))
41-
* **dependencies:** update dependencies to fix SNYK-JS-TAR-15307072 ([fbc5cb4](https://github.com/snyk/snyk/commit/fbc5cb4dbb635a5b01a276db50cbb9a71aacbfbc))
42-
* **dependencies:** update dependencies to fix SNYK-JS-MINIMATCH-15309438 ([8e7873f](https://github.com/snyk/snyk/commit/8e7873ff6e9f852ad57bac4c0024231892754e05))
43-
* **dependencies:** update dependencies to fix SNYK-GOLANG-GOLANGORGXCRYPTOSSH-14059803 and SNYK-GOLANG-GITHUBCOMULIKUNITZXZLZMA-12230262 [IAC-3478] ([1d2d723](https://github.com/snyk/snyk/commit/1d2d72372a8b70a2f9cdb58dcfbab54880cd7223))
7+
* **ui:** Fixed an issue where JSON output was incorrectly printed to stdout when only --json-file-output was specified. ([d6d465d](https://github.com/snyk/snyk/commit/d6d465d3238696e61df472546d3099f84de668dc))
8+
* **language-server:** Fixed an issue where scans would not trigger when Snyk Code was enabled in IDE settings. ([7567881](https://github.com/snyk/snyk/commit/7567881b387ff3464196c4fd3512d79992ab18a9))
9+
* **mcp:** Fixed an issue where Snyk rules were not written locally. ([7567881](https://github.com/snyk/snyk/commit/7567881b387ff3464196c4fd3512d79992ab18a9))

cliv2/go.mod

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -21,11 +21,11 @@ require (
2121
github.com/snyk/code-client-go v1.26.1
2222
github.com/snyk/container-cli v0.0.0-20260213211631-cd2b2cf8f3ea
2323
github.com/snyk/error-catalog-golang-public v0.0.0-20260205094614-116c03822905
24-
github.com/snyk/go-application-framework v0.0.0-20260219121502-ba9cecc54f7d
24+
github.com/snyk/go-application-framework v0.0.0-20260302141548-30b9b6b2d4bf
2525
github.com/snyk/go-httpauth v0.0.0-20240307114523-1f5ea3f55c65
2626
github.com/snyk/snyk-iac-capture v0.6.5
27-
github.com/snyk/snyk-ls v0.0.0-20260224142246-0af54371c7aa
28-
github.com/snyk/studio-mcp v1.6.0
27+
github.com/snyk/snyk-ls v0.0.0-20260304090940-10a6788a163d
28+
github.com/snyk/studio-mcp v1.6.1
2929
github.com/spf13/cobra v1.9.1
3030
github.com/spf13/pflag v1.0.10
3131
github.com/stretchr/testify v1.11.1
@@ -121,7 +121,7 @@ require (
121121
github.com/getsentry/sentry-go v0.31.1 // indirect
122122
github.com/go-git/gcfg v1.5.1-0.20230307220236-3a3c6141e376 // indirect
123123
github.com/go-git/go-billy/v5 v5.7.0 // indirect
124-
github.com/go-git/go-git/v5 v5.16.4 // indirect
124+
github.com/go-git/go-git/v5 v5.16.5 // indirect
125125
github.com/go-ini/ini v1.67.0 // indirect
126126
github.com/go-jose/go-jose/v4 v4.1.3 // indirect
127127
github.com/go-logr/logr v1.4.3 // indirect

cliv2/go.sum

Lines changed: 8 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -253,8 +253,8 @@ github.com/go-git/go-billy/v5 v5.7.0 h1:83lBUJhGWhYp0ngzCMSgllhUSuoHP1iEWYjsPl9n
253253
github.com/go-git/go-billy/v5 v5.7.0/go.mod h1:/1IUejTKH8xipsAcdfcSAlUlo2J7lkYV8GTKxAT/L3E=
254254
github.com/go-git/go-git-fixtures/v4 v4.3.2-0.20231010084843-55a94097c399 h1:eMje31YglSBqCdIqdhKBW8lokaMrL3uTkpGYlE2OOT4=
255255
github.com/go-git/go-git-fixtures/v4 v4.3.2-0.20231010084843-55a94097c399/go.mod h1:1OCfN199q1Jm3HZlxleg+Dw/mwps2Wbk9frAWm+4FII=
256-
github.com/go-git/go-git/v5 v5.16.4 h1:7ajIEZHZJULcyJebDLo99bGgS0jRrOxzZG4uCk2Yb2Y=
257-
github.com/go-git/go-git/v5 v5.16.4/go.mod h1:4Ge4alE/5gPs30F2H1esi2gPd69R0C39lolkucHBOp8=
256+
github.com/go-git/go-git/v5 v5.16.5 h1:mdkuqblwr57kVfXri5TTH+nMFLNUxIj9Z7F5ykFbw5s=
257+
github.com/go-git/go-git/v5 v5.16.5/go.mod h1:QOMLpNf1qxuSY4StA/ArOdfFR2TrKEjJiye2kel2m+M=
258258
github.com/go-ini/ini v1.67.0 h1:z6ZrTEZqSWOTyH2FlglNbNgARyHG8oLW9gMELqKr06A=
259259
github.com/go-ini/ini v1.67.0/go.mod h1:ByCAeIL28uOIIG0E3PJtZPDL8WnHpFKFOtgjp+3Ies8=
260260
github.com/go-jose/go-jose/v4 v4.1.3 h1:CVLmWDhDVRa6Mi/IgCgaopNosCaHz7zrMeF9MlZRkrs=
@@ -555,18 +555,18 @@ github.com/snyk/dep-graph/go v0.0.0-20251219134535-fcb262dc6d25 h1:dwJ4Kdp4c5aaW
555555
github.com/snyk/dep-graph/go v0.0.0-20251219134535-fcb262dc6d25/go.mod h1:hTr91da/4ze2nk9q6ZW1BmfM2Z8rLUZSEZ3kK+6WGpc=
556556
github.com/snyk/error-catalog-golang-public v0.0.0-20260205094614-116c03822905 h1:pUe6iOWHEOFY0t4u4ssXeTqpMmZBu1xq06VBFI9zUik=
557557
github.com/snyk/error-catalog-golang-public v0.0.0-20260205094614-116c03822905/go.mod h1:Ytttq7Pw4vOCu9NtRQaOeDU2dhBYUyNBe6kX4+nIIQ4=
558-
github.com/snyk/go-application-framework v0.0.0-20260219121502-ba9cecc54f7d h1:BKf/UnLaPnLlM/hrsuk28AJv6KqxGQUrz7bkrkvpm8o=
559-
github.com/snyk/go-application-framework v0.0.0-20260219121502-ba9cecc54f7d/go.mod h1:6MuCxSVGYNY3gfNKPZc5oMuy5/Q+yxbLxKnVtOMSB8Y=
558+
github.com/snyk/go-application-framework v0.0.0-20260302141548-30b9b6b2d4bf h1:XWr9j64CPOUHkUOXbNl6aOw5tx6FMq+CtMf7GLg0jTk=
559+
github.com/snyk/go-application-framework v0.0.0-20260302141548-30b9b6b2d4bf/go.mod h1:6MuCxSVGYNY3gfNKPZc5oMuy5/Q+yxbLxKnVtOMSB8Y=
560560
github.com/snyk/go-httpauth v0.0.0-20240307114523-1f5ea3f55c65 h1:CEQuYv0Go6MEyRCD3YjLYM2u3Oxkx8GpCpFBd4rUTUk=
561561
github.com/snyk/go-httpauth v0.0.0-20240307114523-1f5ea3f55c65/go.mod h1:88KbbvGYlmLgee4OcQ19yr0bNpXpOr2kciOthaSzCAg=
562562
github.com/snyk/policy-engine v1.1.3 h1:MU+K8pxbN6VZ9P5wALUt8BwTjrPDpoEtmTtQqj7sKfY=
563563
github.com/snyk/policy-engine v1.1.3/go.mod h1:yOc6YZLWhVGUZjzskDTen8zxrNTUHL4FyZXM0Ezlb8M=
564564
github.com/snyk/snyk-iac-capture v0.6.5 h1:992DXCAJSN97KtUh8T5ndaWwd/6ZCal2bDkRXqM1u/E=
565565
github.com/snyk/snyk-iac-capture v0.6.5/go.mod h1:e47i55EmM0F69ZxyFHC4sCi7vyaJW6DLoaamJJCzWGk=
566-
github.com/snyk/snyk-ls v0.0.0-20260224142246-0af54371c7aa h1:+irqniO3t7GRCQvaU5jnKjq+APIHIbwPktyRzw2UvNU=
567-
github.com/snyk/snyk-ls v0.0.0-20260224142246-0af54371c7aa/go.mod h1:NxfJemYgboeNSyxWs1Gqrbx6LRQNjc5iZwVe5WzeIQI=
568-
github.com/snyk/studio-mcp v1.6.0 h1:ubT61N76AAtAmbiiJP8WzLmwThmgaKk0Xw1FF5g3adw=
569-
github.com/snyk/studio-mcp v1.6.0/go.mod h1:NA+BaqNCvY5ne2X8Gmj/v96eeizaWqQ7cjIYMCbvNrs=
566+
github.com/snyk/snyk-ls v0.0.0-20260304090940-10a6788a163d h1:M/Gl8dYu5tPdLuD3IUUWe4YM9qgi1Cx7rbNDIp7pXnc=
567+
github.com/snyk/snyk-ls v0.0.0-20260304090940-10a6788a163d/go.mod h1:/5b3L4dWdtIEQaWCNHDUsdNEmjRUPS9PfuI3l0Rm8z4=
568+
github.com/snyk/studio-mcp v1.6.1 h1:rk+3eZDt9hVcdnmCzvK78qzuBzbxAHBf862ABc38t+I=
569+
github.com/snyk/studio-mcp v1.6.1/go.mod h1:NA+BaqNCvY5ne2X8Gmj/v96eeizaWqQ7cjIYMCbvNrs=
570570
github.com/sourcegraph/conc v0.3.0 h1:OQTbbt6P72L20UqAkXXuLOj79LfEanQ+YQFNpLA9ySo=
571571
github.com/sourcegraph/conc v0.3.0/go.mod h1:Sdozi7LEKbFPqYX2/J+iBAM6HpqSLTASQIKqDmF7Mt0=
572572
github.com/sourcegraph/go-lsp v0.0.0-20240223163137-f80c5dd31dfd h1:Dq5WSzWsP1TbVi10zPWBI5LKEBDg4Y1OhWEph1wr5WQ=

test/acceptance/workspaces/pip-app-robust/requirements.txt

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
--trusted-host pypi.fury.io
22

33
Jinja2==2.7.2
4-
git+https://github.com/snyk-fixtures/python-pypi-package-simple@v1.0.0#egg=simple==v1.0.0
4+
git+https://github.com/snyk-fixtures/python-pypi-package-simple@v1.0.0#egg=simple
55
-e git+https://github.com/snyk-fixtures/python-pypi-package-sample-subdir#egg=sample&subdirectory=subdir
66
https://files.pythonhosted.org/packages/d0/d7/4806fd165c27716f02a3a9c23d207854b8a3ed884db53c2781b92bd8d4f4/whl.setup-0.2-py2.py3-none-any.whl
77
requests; python_version >= "3.8.dev0"

test/jest/acceptance/snyk-test/basic-test-all-languages.spec.ts

Lines changed: 8 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -132,6 +132,10 @@ describe.each(userJourneyWorkflows)(
132132
{
133133
shell: true,
134134
cwd: project.path(),
135+
env: {
136+
...env,
137+
GIT_LFS_SKIP_SMUDGE: '1',
138+
},
135139
},
136140
);
137141

@@ -142,6 +146,10 @@ describe.each(userJourneyWorkflows)(
142146
{
143147
shell: true,
144148
cwd: project.path(),
149+
env: {
150+
...env,
151+
GIT_LFS_SKIP_SMUDGE: '1',
152+
},
145153
},
146154
);
147155
}

0 commit comments

Comments
 (0)