1.1309.0-preview.458cc33c1f73ec921f32a1d70e5ce13919dcba94 (2026-10-26)
The Snyk CLI is being deployed to different deployment channels, users can select the stability level according to their needs. For details please see this documentation
Features
- add the supply chain extension and exit 77 when it isn't enabled (5793e5e)
- exit 69 for snyk sc when the Registry Proxy is unreachable (a71414f)
- log machine ID at start of day (ef0b402)
- map snyk sc Registry Proxy errors to exit codes (961bb01)
- set the typed interaction.persona on analytics events [IDE-2635] (fe8f0c3)
Bug Fixes
- [OSM-3986] bump snyk-gradle-plugin to 7.1.6 (33a19bc)
- allow snyk test --html without preview features, add code test HTML spec and shared HTML checks (927416c)
- bump cli-extension-dep-graph to v2.19.1 (e58fd4b)
- bump cli-extension-dep-graph to v2.19.2 (e7d45ce)
- bump snyk-nuget-plugin to 4.5.4 (ec88c97)
- bump snyk-nuget-plugin to 4.5.5 [OSM-3544] (10c6ddc)
- code review markups (5cf53ba)
- correct versions of nested Go modules in vendored container binaries (c5d1dcb)
- CVE-2026-33532 (4e1beba)
- CVE-2026-73055 improper encoding or escaping (e3d1982)
- CVE-2026-93748 and CVE-2026-93750 (1c5e82a)
- dep: update Node.js to 22.23.4 (23482f5)
- honour pip extras and PEP 508 environment markers in Python scans (9017841), closes snyk/snyk-python-plugin#385 #386
- iac: update opa to v1.4.2 to address CVE-2025-46569 [IAC-3311] (6346dfc)
- redact debug log terms as whole words (16b800d)
- remove outdated container app vulns warning (0a0bfe6)
- report the right nested npm copy for lockfile v2/v3 (b67d629)
- show project name in UFM human-readable test summary (665414f)
- snyk scan --source dir without reachability (6c2a547)
- SNYK-JS-TAR-18319500 (44c6f80)
- stop .NET scans failing when SelfContained=true is set [OSM-3994] (e5a9d88)
- stop false-positive Gradle findings on KGP 2.0 projects [OSM-3992] (c9446f7), closes snyk/snyk-gradle-plugin#359
- stop reporting .NET reference assemblies in container scans (a280e2f), closes snyk/snyk-docker-plugin#932
- update Go version (343f4f0)
- update toml to 5.0.1 in snyk-fix (f07ccba)
- upgrade brace-expansion to fix uncontrolled recursion (a37eb65)
- use a relative target file for uv monitor with an absolute --file (bf371ab)