jfrog/jfrog-cli v2.126.0

2.126.0

on GitHub

What changed in v2.126.0

Auto-generated from 6 repositories · 2026-10-06
Comparing v2.125.0 → v2.126.0

ℹ️ No changes in: gofrog

✨ New Features

• [build-info-go] RTECO-1362 - Add strict mode for npm build-info dependency resolution #418 (@udaykb2)
• [build-info-go] RTECO-2003: add Chocolatey FlexPack collectors #425 (@bhanurp)
• [build-info-go] RTECO-2247: PSResource (PowerShell PSResourceGet) FlexPack collectors #430 (@bhanurp)
• [jfrog-cli] RTECO-1362: Add comprehensive npm fail-on-uncollected-deps integration tests #3698 (@udaykb2)
• [jfrog-cli] RTECO-1776 - Implement Complete Debian(Apt) Support for build info #3691 (@fluxxBot)
• [jfrog-cli] Add huggingface_hub version matrix to CI (1.19.0/1.20.0/1.29.0) #3716 (@agrasth)
• [jfrog-cli] RTECO-2003: register jf choco and add the Chocolatey test suite #3708 (@bhanurp)
• [jfrog-cli] RTECO-2247: Add jf Install-/Save-/Update-/Publish-PSResource commands #3717 (@bhanurp)
• [jfrog-cli-artifactory] RTECO-1362 - Add --fail-on-uncollected-deps flag for npm install/ci #542 (@udaykb2)
• [jfrog-cli-artifactory] RTECO-2003: add jf choco and jf setup choco #556 (@bhanurp)
• [jfrog-cli-artifactory] RTECO-2247 - PSResource (PowerShell PSResourceGet) setup + FlexPack command #563 (@bhanurp)
• [jfrog-cli-core] RTECO-2003: add the Choco project type #1616 (@bhanurp)
• [jfrog-cli-core] RTECO-2247: Add PSResource project type #1620 (@bhanurp)
• [jfrog-cli-security] Add Yarn V3/4 Package Updater #875 (@orto17)
• [jfrog-cli-security] Add NuGet Package Updater For plain PackageReference Fixes #874 (@orto17)
• [jfrog-cli-security] Add uv fix support to the Python package updater #883 (@orto17)
• [jfrog-cli-security] Fix and correctly scope the Poetry package updater #896 (@orto17)
• [jfrog-cli-security] XRAY-161169 - Add indirect CVEs paths to analysis #895 (@VidrevichMichael)
• [jfrog-client-go] Support streaming POST requests #1389 (@asafgabai)
• [jfrog-client-go] XRAY-160563 - Add service to get transitive data from Catalog #1391 (@VidrevichMichael)
• [jfrog-client-go] Add ArtifactSummaryForCommand To Tag Caller's CLI Command #1394 (@orto17)

🐛 Bug Fixes

• [build-info-go] Resolve dynamic project version from uv.lock for UV build info #407 (@agrasth)
• [jfrog-cli-artifactory] RTECO-2025 - Fix CI VCS taking huge time to tag artifacts when OriginalDeploymentRepo is missing #557 (@fluxxBot)
• [jfrog-cli-artifactory] RTECO-2022 - Fixed the bug in jf mvn --scan command #550 (@naveenku-jfrog)
• [jfrog-cli-artifactory] RTECO-1786 - Fix missing repo field in AQL checksum enrichment for ruby and uv #568 (@agrasth)
• [jfrog-cli-artifactory] RTECO-2263 - Fix jf helm push build properties 404 on virtual Helm OCI repositories #564 (@naveenku-jfrog)
• [jfrog-cli-security] XRAY-160690 - Fix use Xray scan graph for binary #886 (@attiasas)
• [jfrog-cli-security] XRAY-160044 - Skip for local Go 'replace' modules #885 (@Phavya-jfrog)
• [jfrog-cli-security] Resolve Pip/Uv detection ambiguity in the shared detector #880 (@orto17)
• [jfrog-cli-security] Fix empty local Artifact path for results cdx upload endpoint #901 (@eranturgeman)
• [jfrog-cli-security] Add guard to time stamp if event fails #907 (@attiasas)
• [jfrog-cli-security] XRAY-159794 - Open-waiver-for-pending-catalog #905 (@zeevt-at-jfrog)

🔧 Internal Changes

• [jfrog-cli-security] Update Analyzer Manager to v1.52.0 #882 (@attiasas)
• [jfrog-cli-security] Revert AnalyzerManager to v1.50.0 #884 (@attiasas)
• [jfrog-cli-security] Update Analyzer Manager to v1.55.0 #887 (@attiasas)
• [jfrog-cli-security] Update dependencies #889 (@attiasas)
• [jfrog-cli-security] Update dependencies #900 (@attiasas)
• [jfrog-cli-security] Update Analyzer Manager to v1.60.0 #911 (@Jordanh1996)

📦 Other Changes

• [build-info-go] RTECO-1782: warn on externally-resolved deps and dedupe requestedBy paths #424 (@bhanurp)
• [jfrog-cli] RTECO-1782: JFROG_RUN_NATIVE wins over project config, fix dotnet help, add FlexPack tests #3703 (@bhanurp)
• [jfrog-cli] make cargo help doc public #3722 (@reshmifrog)
• [jfrog-cli-artifactory] Rteco 2298 integrate the new package managers integration tests #561 (@reshmifrog)
• [jfrog-cli-artifactory] [PM Fixer] Fix huggingface 1.29.0 compatibility: swallow HfUriError from commitUrl parsing #548 (@agrasth)
• [jfrog-cli-artifactory] RTECO-2259 Add include_evidence option to release-bundle-distribute CLI command #562 (@naveenku-jfrog)
• [jfrog-cli-artifactory] RTECO-1782: let the native client publish, and keep credentials off disk #552 (@bhanurp)
• [jfrog-cli-artifactory] RTECO-2003 - align Chocolatey source handling with nuget, dotnet and psresource #569 (@bhanurp)
• [jfrog-cli-security] XRAY-159447 - cvs fallback for pypi #878 (@Phavya-jfrog)
• [jfrog-cli-security] Detect Poetry 2.x native PEP 621 projects without poetry.lock #894 (@orto17)
• [jfrog-cli-security] Nuget Package Updater - CPM Support #888 (@orto17)
• [jfrog-cli-security] XRAY-129161 - Send curation audit id in headers for email batching #897 (@gauriy-tech)
• [jfrog-client-go] RTECO-2259 Add include_evidence option to release-bundle-distribute CLI command #1392 (@naveenku-jfrog)

📊 Summary

🔗 Module Version Changes