chore: Update release candidate #6421

PeterSchafer · 2026-01-08T18:06:57Z

Release Candidate

- Add pruneRepeatedSubdependencies field to MonitorDependenciesRequest interface - Update function signatures to accept Options & MonitorOptions - Pass pruneRepeatedSubdependencies from CLI options to registry request

- Verify flag is passed to registry when set to true - Verify flag is not included in request when not set

chore: update os cli extension

…ec-scans feat: enable reachability for prodsec scans

…eachability-filters chore: upgrade sbom extension to support reachability filters

chore: update os flow extension

…-monitor

…-container-monitor feat: implement CLI flag pruneRepeatedSubDependencies for container monitor

chore: extend suppression support for UFM presenter

…1-2025 chore: update os flows cli extension

…v-deps fix: [OSM-3066] support for poetry dev deps

chore: improve ufm sarif rendering including ignores

…help-main docs: synchronizing help from snyk/user-docs

…db11e416f38cc2d3072

…type chore: upgrade os extensions to allow ignore type to be mapped

chore(language-server): integrate LS

feat: upgrade packages so all sbom traffic flows through os flows ext…

chore: update studio-mcp extension

When monitoring a go.mod (Go) project, Snyk's dependency discovery will now include fully-qualified PackageURL on all package imports.

feat: add PackageURL information to go.mod dependency graphs

Resolves false positive vulnerabilities for RHEL 10 container images where the installed package version matches the fixed version (e.g., [email protected] reported vulnerable, fixed in 0:1.6.1-8.el10).

fix: update snyk-docker-plugin to v8.15.2

…evel-alias-but-transitive-is-not fix: nodejs transitive with a top level alias but transitive is not

CLI-1268

chore: move exit code mapping to a central location

…ef5e357a773135c9813

…87f54c2bd5d99748380

chore(language-server): integrate LS

feat(sbom): support for deb, apk and rpm ecosystems for sbom test

github-actions · 2026-01-08T18:08:27Z

	Warnings
⚠️	Please make changes to `snyk help` text in Gitbook. Changes will be automatically synchronised to Snyk CLI as a scheduled PR. For more information, see: `help/README.md`.
⚠️	Since the CLI is unifying on a standard and improved tooling, we're starting to migrate old-style `import`s and `export`s to ES6 ones. A file you've modified is using either `module.exports` or `require()`. If you can, please update them to ES6 import syntax and export syntax. Files found: `.eslintrc.json` `test/jest/acceptance/snyk-code/snyk-code-user-journey.spec.ts` `test/jest/unit/json-file-output.spec.ts` `test/jest/unit/snyk-code/snyk-code-test.spec.ts` `test/jest/util/getServerPort.ts`
⚠️	There are multiple commits on your branch, please squash them locally before merging!
⚠️	"chore: automatic integration of language server 39b92d5421215ca26725887f54c2bd5d99748380" is too long. Keep the first line of your commit message under 72 characters.
⚠️	"chore: automatic integration of language server b70c950dda41bbb323f80ef5e357a773135c9813" is too long. Keep the first line of your commit message under 72 characters.
⚠️	"Merge pull request #6364 from snyk/fix/nodejs-transitive-with-a-top-level-alias-but-transitive-is-not" is too long. Keep the first line of your commit message under 72 characters.
⚠️	"chore: automatic integration of language server 8c5878cbac7d18bf8e110c0aee0a05f95d0e7154" is too long. Keep the first line of your commit message under 72 characters.
⚠️	"Merge pull request #6387 from snyk/feat/use-thread-safe-environment-when-calling-legacycli" is too long. Keep the first line of your commit message under 72 characters.
⚠️	"chore: automatic integration of language server ba84c9f012828a4ed598cf761f80732c4d281604" is too long. Keep the first line of your commit message under 72 characters.
⚠️	"Merge pull request #6378 from snyk/docs/automatic-gitbook-update-cli-help-main" is too long. Keep the first line of your commit message under 72 characters.
⚠️	"Merge remote-tracking branch 'origin/main' into chore/sync-main-with-v1.1301.1" is too long. Keep the first line of your commit message under 72 characters.
⚠️	"Merge pull request #6369 from snyk/chore/uprade-os-flows-extension-include-test-facts" is too long. Keep the first line of your commit message under 72 characters.
⚠️	"chore: automatic integration of language server ff4aa3f0d1152c8d7a5c4ba9b7404614462ac886" is too long. Keep the first line of your commit message under 72 characters.
⚠️	"Merge pull request #6366 from snyk/chore/add-all-projects-support-for-wip-uv" is too long. Keep the first line of your commit message under 72 characters.
⚠️	"chore: automatic integration of language server de8f157ce95d3b10560ebb9241560bcab4acaa89" is too long. Keep the first line of your commit message under 72 characters.
⚠️	"Merge remote-tracking branch 'origin/main' into chore/sync-main-with-v1.1301.1" is too long. Keep the first line of your commit message under 72 characters.
⚠️	"Merge remote-tracking branch 'origin/main' into chore/sync-main-with-v1.1301.1" is too long. Keep the first line of your commit message under 72 characters.
⚠️	"Merge pull request #6353 from snyk/feat/container-cgo-stripped-go-binaries-support" is too long. Keep the first line of your commit message under 72 characters.
⚠️	"Merge pull request #6350 from snyk/chore/CLI-1270_user_journey_UFM_sarif_tests" is too long. Keep the first line of your commit message under 72 characters.
⚠️	"Merge pull request #6348 from snyk/fix/update-os-cli-extension-04-12-2025" is too long. Keep the first line of your commit message under 72 characters.
⚠️	"chore: automatic integration of language server 659b8a92f4cd01ef43022a874bf09e8b919bc40d" is too long. Keep the first line of your commit message under 72 characters.
⚠️	"Merge pull request #6337 from snyk/chore/test-improve-reliability-of-port" is too long. Keep the first line of your commit message under 72 characters.
⚠️	"chore: automatic integration of language server d999dd468f2e5815fb9f9a591f9aadf35089b29c" is too long. Keep the first line of your commit message under 72 characters.
⚠️	"Merge pull request #6333 from snyk/feat(reachability)/improve-upload-speed" is too long. Keep the first line of your commit message under 72 characters.
⚠️	"Merge pull request #6318 from snyk/fix/include-orgID-in-the-os-monitor-api-req" is too long. Keep the first line of your commit message under 72 characters.
⚠️	"Merge pull request #6305 from snyk/fix/show-full-file-path-in-gradle-sarif-output" is too long. Keep the first line of your commit message under 72 characters.
⚠️	"Merge pull request #6324 from snyk/fix/rendering-of-fix-advice-in-os-extension" is too long. Keep the first line of your commit message under 72 characters.
⚠️	"Merge pull request #6323 from snyk/chore/CLI-1211_extend_UFM_test_result" is too long. Keep the first line of your commit message under 72 characters.
⚠️	"chore: extend TestResult with extra medatadata for UFM SARIF presentation" is too long. Keep the first line of your commit message under 72 characters.
⚠️	"chore: automatic integration of language server c23fd4ea5f4e025ea40a999f112962072d617bee" is too long. Keep the first line of your commit message under 72 characters.
⚠️	"Merge pull request #6317 from snyk/chore/upgrade-os-extension-fix-nil-check" is too long. Keep the first line of your commit message under 72 characters.
⚠️	"Merge pull request #6313 from snyk/chore/upgrade-os-extension-ignore-type" is too long. Keep the first line of your commit message under 72 characters.
⚠️	"chore: automatic integration of language server 2cc554ec87f0f1b1f8005db11e416f38cc2d3072" is too long. Keep the first line of your commit message under 72 characters.
⚠️	"Merge pull request #6312 from snyk/docs/automatic-gitbook-update-cli-help-main" is too long. Keep the first line of your commit message under 72 characters.
⚠️	"Merge pull request #6303 from snyk/fix/OSM-3066/support-for-poetry-dev-deps" is too long. Keep the first line of your commit message under 72 characters.
⚠️	"Merge pull request #6309 from snyk/chore/update-os-cli-extension-14-11-2025" is too long. Keep the first line of your commit message under 72 characters.
⚠️	"Merge pull request #6285 from snyk/CN-269/prune-repeated-sub-deps-for-container-monitor" is too long. Keep the first line of your commit message under 72 characters.
⚠️	"Merge branch 'main' into CN-269/prune-repeated-sub-deps-for-container-monitor" is too long. Keep the first line of your commit message under 72 characters.
⚠️	"Merge pull request #6306 from snyk/chore/upgrade-sbom-extension-for-reachability-filters" is too long. Keep the first line of your commit message under 72 characters.
⚠️	"Merge pull request #6304 from snyk/feat/enable-reachability-for-prodsec-scans" is too long. Keep the first line of your commit message under 72 characters.

Generated by 🚫 dangerJS against 2244f89

bdemeo12 and others added 30 commits November 5, 2025 14:14

feat: pass pruneRepeatedSubdependencies flag to registry

dcdb9e8

- Add pruneRepeatedSubdependencies field to MonitorDependenciesRequest interface - Update function signatures to accept Options & MonitorOptions - Pass pruneRepeatedSubdependencies from CLI options to registry request

test: add unit tests for pruneRepeatedSubdependencies flag

b9921bf

- Verify flag is passed to registry when set to true - Verify flag is not included in request when not set

fix: lint

8724e26

chore: update os cli extension

1967f99

Merge pull request #6301 from snyk/feat/update-cli-extension-12-11-25

47d589a

chore: update os cli extension

feat: enable reachability for prodsec scans

0e8633b

Merge pull request #6304 from snyk/feat/enable-reachability-for-prods…

c323133

…ec-scans feat: enable reachability for prodsec scans

chore: upgrade sbom extension to support reachability filters

cbfbba4

Merge pull request #6306 from snyk/chore/upgrade-sbom-extension-for-r…

5e92978

…eachability-filters chore: upgrade sbom extension to support reachability filters

chore: update os flow extension

c1af642

Merge pull request #6307 from snyk/feat/update-extension-13-11-25

fda95e1

chore: update os flow extension

Merge branch 'main' into CN-269/prune-repeated-sub-deps-for-container…

934ffce

…-monitor

Merge pull request #6285 from snyk/CN-269/prune-repeated-sub-deps-for…

cc2c3dd

…-container-monitor feat: implement CLI flag pruneRepeatedSubDependencies for container monitor

chore: extend suppression support for UFM presenter

2ce49d1

Merge pull request #6310 from snyk/chore/CLI-1253_UFM_extend_ignores

949f882

chore: extend suppression support for UFM presenter

chore: update os flows cli extension

0b02a2d

Merge pull request #6309 from snyk/chore/update-os-cli-extension-14-1…

fc6977d

…1-2025 chore: update os flows cli extension

fix: [OSM-3066] support for poetry dev deps

6977004

fix: [OSM-3066] test for poetry --dev with no dev-dependency group

98f5ade

Merge pull request #6303 from snyk/fix/OSM-3066/support-for-poetry-de…

91d4076

…v-deps fix: [OSM-3066] support for poetry dev deps

chore: improve ufm sarif rendering including ignores

0b34409

Merge pull request #6311 from snyk/chore/CLI-1253

d84632e

chore: improve ufm sarif rendering including ignores

docs: synchronizing help from snyk/user-docs

bf53735

Merge pull request #6312 from snyk/docs/automatic-gitbook-update-cli-…

4c5c452

…help-main docs: synchronizing help from snyk/user-docs

chore: upgrade os extensions to allow ignore type to be mapped

0a54c31

chore: automatic integration of language server 2cc554ec87f0f1b1f8005…

a52dcc6

…db11e416f38cc2d3072

Merge pull request #6313 from snyk/chore/upgrade-os-extension-ignore-…

dd95065

…type chore: upgrade os extensions to allow ignore type to be mapped

Merge branch 'main' into chore/automatic-upgrade-of-ls

3dda1d5

Merge pull request #6315 from snyk/chore/automatic-upgrade-of-ls

a4619d2

chore(language-server): integrate LS

chore: upgrade os extensions to allow nil actions on the fix

2f58df1

attriaayush and others added 21 commits January 6, 2026 16:21

feat: sbom traffic flows through os flows extension

4935cd5

Merge pull request #6400 from snyk/feat/sbom-test-with-reachability

4f28ed4

feat: upgrade packages so all sbom traffic flows through os flows ext…

fix(mcp): add rule file to .gitignore if not previously ignored

cc78694

Merge pull request #6414 from snyk/chore/update-mcp-ext

162202e

chore: update studio-mcp extension

feat: add PackageURL information to go.mod dependency graphs

d90b54e

When monitoring a go.mod (Go) project, Snyk's dependency discovery will now include fully-qualified PackageURL on all package imports.

Merge pull request #6388 from snyk/feature/UNIFY-1048-gomodules-purls

319ff4f

feat: add PackageURL information to go.mod dependency graphs

fix: update snyk-docker-plugin to v8.15.1

d4afe60

Resolves false positive vulnerabilities for RHEL 10 container images where the installed package version matches the fixed version (e.g., [email protected] reported vulnerable, fixed in 0:1.6.1-8.el10).

fix: update snyk-docker-plugin to v8.15.2

4303ebf

fix: update snyk-docker-plugin to v8.15.2

fix: nodejs transitive with a top level alias but transitive it not

237a4f5

Merge pull request #6364 from snyk/fix/nodejs-transitive-with-a-top-l…

fe2c4a1

…evel-alias-but-transitive-is-not fix: nodejs transitive with a top level alias but transitive is not

chore: move exit code mapping to a central location

72acfd6

feat: handle aibom error exit code

d8fed82

CLI-1268

Merge pull request #6411 from snyk/chore/CLI-1297_exitcode_mapping

22772d4

chore: move exit code mapping to a central location

chore: automatic integration of language server b70c950dda41bbb323f80…

071de93

…ef5e357a773135c9813

chore: automatic integration of language server 39b92d5421215ca267258…

bb33e2d

…87f54c2bd5d99748380

Merge pull request #6416 from snyk/chore/automatic-upgrade-of-ls

bb0825e

chore(language-server): integrate LS

chore: bump os-flows + uv acceptance test

13cb05f

Merge pull request #6413 from snyk/chore/bump-os-uv-acceptance

07e643f

feat: sbom test support deb, apk and rpm

9fd6f84

Merge pull request #6419 from snyk/chore/bump-os-extension

d5ea931

feat(sbom): support for deb, apk and rpm ecosystems for sbom test

docs: update release notes

5770d53

PeterSchafer marked this pull request as ready for review January 8, 2026 18:48

PeterSchafer requested review from a team as code owners January 8, 2026 18:48

chore: Update Release Notes

2244f89

PeterSchafer force-pushed the tmp/1767895586-release-candidate branch from e4ccb13 to 2244f89 Compare January 8, 2026 19:04

CatalinSnyk approved these changes Jan 9, 2026

View reviewed changes

PeterSchafer merged commit 25c4570 into release-candidate Jan 9, 2026
5 checks passed

PeterSchafer deleted the tmp/1767895586-release-candidate branch January 9, 2026 08:25

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore: Update release candidate #6421

chore: Update release candidate #6421

Uh oh!

PeterSchafer commented Jan 8, 2026

Uh oh!

github-actions bot commented Jan 8, 2026 •

edited

Loading

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

20 participants

chore: Update release candidate #6421

chore: Update release candidate #6421

Uh oh!

Conversation

PeterSchafer commented Jan 8, 2026

Uh oh!

github-actions bot commented Jan 8, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

20 participants

github-actions bot commented Jan 8, 2026 •

edited

Loading