snyk/cli v1.1305.0

on GitHub

1.1305.0 (2026-05-20)

The Snyk CLI is being deployed to different deployment channels, users can select the stability level according to their needs. For details please see this documentation

Features

• sbom: Introduces the --allow-incomplete-sbom flag for snyk sbom, allowing the SBOM to be generated even when individual projects fail to resolve. Failed projects are surfaced as per-project errors alongside the successful results. (29ba128)
• container: Speed up snyk container monitor by sending dependency requests in parallel, configurable via the SNYK_REQUEST_CONCURRENCY environment variable. (186c5fb, 6764f65)
• general: Linux ARM64 and AMD64 binaries are now statically linked by default. (f02b850)
• mcp: Adds an experimental breakability evaluation tool to the Snyk MCP Server. (69806f5)

Bug Fixes

• test: Fixes resolution of aliased npm packages so the alias from the lockfile is used instead of the target package name. (9b0e4d9)
• test: Fixes parsing of Python .whl files when scanning projects with --all-projects. (12ac0db)
• deps: Updates dependencies to fix vulnerabilities:
  • CVE-2026-34165 (1eec8f8)
  • CVE-2026-33762 (1eec8f8)
  • CVE-2025-62718 (0c4bdcc)
  • CVE-2026-6321 (2670813)
  • CVE-2026-6322 (2670813)