1.1309.0-preview.559eb0fec89676ba27c318b921b8df5ee7cb6cd3 (2026-10-21)
The Snyk CLI is being deployed to different deployment channels, users can select the stability level according to their needs. For details please see this documentation
Features
- exit 69 for snyk sc when the Registry Proxy is unreachable (a71414f)
- log machine ID at start of day (ef0b402)
- map snyk sc Registry Proxy errors to exit codes (961bb01)
Bug Fixes
- [OSM-3986] bump snyk-gradle-plugin to 7.1.6 (33a19bc)
- allow snyk test --html without preview features, add code test HTML spec and shared HTML checks (3bc6646)
- allow snyk test --html without preview features, add code test HTML spec and shared HTML checks (927416c)
- bump cli-extension-dep-graph to v2.19.1 (e58fd4b)
- bump cli-extension-dep-graph to v2.19.2 (e7d45ce)
- bump snyk-nuget-plugin to 4.5.4 (ec88c97)
- bump snyk-nuget-plugin to 4.5.5 [OSM-3544] (10c6ddc)
- code review markups (5cf53ba)
- correct versions of nested Go modules in vendored container binaries (c5d1dcb)
- CVE-2022-21681 ReDoS (334f873)
- CVE-2026-33532 (4e1beba)
- CVE-2026-73055 improper encoding or escaping (e3d1982)
- CVE-2026-93748 and CVE-2026-93750 (1c5e82a)
- honour pip extras and PEP 508 environment markers in Python scans (9017841), closes snyk/snyk-python-plugin#385 #386
- iac: update opa to v1.4.2 to address CVE-2025-46569 [IAC-3311] (6346dfc)
- redact debug log terms as whole words (53da9db)
- redact debug log terms as whole words (16b800d)
- report the right nested npm copy for lockfile v2/v3 (b67d629)
- show project name in UFM human-readable test summary (ca87448)
- show project name in UFM human-readable test summary (665414f)
- snyk scan --source dir without reachability (6c2a547)
- SNYK-JS-TAR-18319500 (44c6f80)
- stop .NET scans failing when SelfContained=true is set [OSM-3994] (e5a9d88)
- stop false-positive Gradle findings on KGP 2.0 projects [OSM-3992] (c9446f7), closes snyk/snyk-gradle-plugin#359
- stop reporting .NET reference assemblies in container scans (a280e2f), closes snyk/snyk-docker-plugin#932
- update Go runtime to 1.26.9 to address vulnerabilities (8d515f7)
- upgrade brace-expansion to fix uncontrolled recursion (a37eb65)
- use a relative target file for uv monitor with an absolute --file (bf371ab)