1.1292.0 (2024-06-26)
The Snyk CLI is being deployed to different deployment channels, users can select the stability level according to their needs. For details please see this documentation
News
This Snyk CLI release delivers an assortment of bug fixes and improvements.
- We've added support for pnpm, giving you more flexibility in your project setup.
- You can now scan npm/yarn projects even without lockfiles, ensuring comprehensive vulnerability detection regardless of your dependency management approach.
- We're committed to strengthening security. This release includes redaction of additional sensitive data in debug logs, minimizing potential risks.
Complete changelog
Features
- test: Added pnpm support under 'enablePnpmCli' feature flag (#5181) (46769cc)
- test: Support scan of npm/yarn projects without lockfiles (e2d77a9)
- monitor: Set target-reference in the monitor request (51ed8f5)
- code: Centrally check if code test is enabled (#5239) (e5a00e2)
- sbom: Improve depgraph for Maven projects (fbb33d7)
- sbom: Use RFC 3339 for all timestamps in sbom test result (#5204) (91bf191)
- language-server: Add --all-projects flag scans by default IDE-318 (fdcf30e)
- language-server: Enable incremental scanning IDE-275 (d198685)
- language-server: Add support for IDE themes (c1c4d08)
- language-server: Consistent styling across intellij and vscode (#5282) (9aa6f76)
- logging: Redact additional types of sensitive data from debug logs (#5254) (056cdab)
Bug Fixes
- auth: Autodetect IDE usage and fallback to API token based authentication (#5241) (4c795e0)
- iac: Upgrade iac custom rules to address Vulnerabilities IAC-2944 (453db24)
- language-server: Caching problem when no vulnerabilities in the IDE (#5223) (89c9491)
- language-server: Remove incorrect /v1 path (#5214) (cf16470)
- dependencies: Update dependencies to reduce vulnerabilities (#5131) (4c7cb3c)
- sbom: sbom test output padding (e3b7cac)
- sbom: Fix container purl generation for apt and rpm (#5207) (fa9d512)
- sbom: Retain error code during SBOM generation (#5202) (5e98aaa)
- test: support cyclic dependencies in maven with dverbose (#5208) (fb24c02)
- test: Add tool version and informationUri to sarif output (#5203) (b899fd3)
- test: fixing several .NET bugs (#5217) (c27d767)
- test: fixing a bug causing .NET beta scanning to fail on older versions of .NET (#5228) (5fdecf7)
- test: .NET runtime resolution testing now supports projects targeting .NET Standard frameworks (#5169) (44d0861)
- test: fix issues of type 'Cannot find module ...' in snyk-docker-plugin (#5301) (88efd54)
- monitor: fix project name when using assets-project-name flag (#5077) (57dc718)