1.1308.2 (2026-10-21)
The Snyk CLI is being deployed to different deployment channels, users can select the stability level according to their needs. For details please see this documentation
Bug Fixes
- test: .NET scans no longer fail with NETSDK1067 when
SelfContained=trueis set in the build environment. (28e90c6ea) - test:
snyk test --source-dirnow returns a clear validation error when used without--reachability=true, instead of ignoring the flag or treating the path as the project directory. (3af559571) - test:
snyk test --fail-on=patchableno longer fails with "Unsupported value 'patchable' for --fail-on flag". (3af559571) - language-server: Various Snyk Language Server fixes: an expired token now shows one re-authenticate prompt instead of several; signing in from one IDE window now signs in your other open windows; and when you only show net new issues, the IDE finds the base branch from
origin/HEADand asks you to pick one if none is found, instead of reporting a failed scan. (97ef9474f) - deps: Updates dependencies to fix vulnerabilities:
- SNYK-JS-TAR-18319500 (05319827c)
- CVE-2026-33532 (48f87b8ab)
- CVE-2026-73055 (14a844fed)
- Updates the Go runtime to 1.26.10 to address CVE-2026-78663, CVE-2026-78669, and CVE-2026-111943 (6a8f882fc)
- CVE-2026-78659, CVE-2026-78660, and CVE-2026-97032 (50da69a7c)
- CVE-2026-102941 (b6f592124)