Skip to content

Bump @snyk/protect from 1.1187.0 to 1.1306.2 - #385

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/snyk/protect-1.1306.2
Open

Bump @snyk/protect from 1.1187.0 to 1.1306.2#385
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/snyk/protect-1.1306.2

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 6, 2026

Copy link
Copy Markdown
Contributor

Bumps @snyk/protect from 1.1187.0 to 1.1306.2.

Release notes

Sourced from @鈥媠nyk/protect's releases.

v1.1306.2

1.1306.2 (2026-07-27)

The Snyk CLI is being deployed to different deployment channels, users can select the stability level according to their needs. For details please see this documentation

Bug Fixes

  • language-server: Improved authentication handling in the Snyk Language Server, which powers Snyk's IDE integrations. (3afb07a)
  • deps: Updates dependencies to fix vulnerabilities:
    • SNYK-GOLANG-GOOGLEGOLANGORGGRPCINTERNALXDSRBAC-18172577 (11d1660)

v1.1306.1

1.1306.1 (2026-07-16)

The Snyk CLI is being deployed to different deployment channels, users can select the stability level according to their needs. For details please see this documentation

Bug Fixes

v1.1306.0

1.1306.0 (2026-07-09)

The Snyk CLI is being deployed to different deployment channels, users can select the stability level according to their needs. For details please see this documentation

Features

  • doctor: Adds the snyk doctor command to diagnose common CLI problems: generate a diagnostic report for the current system, or analyze debug log output. (ab56a0e)
  • container: Container scans now detect the Java runtime version across a wider range of JVM base images, and can now find vulnerabilities in .NET application dependencies. (5586aac)
  • mcp: The breakability evaluation tool in the Snyk MCP Server is now enabled by default and no longer requires an experimental flag. (56a9196)
  • test: Improves dependency detection for Gradle projects. (c819b69)
  • redteam: The experimental snyk redteam command has been removed from the CLI, following its deprecation (deprecation date May 31, 2026). (c7d0e3e)

Bug Fixes

  • general: Shows a warning when a request is automatically retried due to rate limiting, instead of retrying silently. (f803397)
  • general: Skips the reachability upload when no supported files are present, instead of failing. (9ba448c)
  • test: Fixes dependency resolution for Swift Package Manager projects that reference packages by registry identity, so they're correctly matched to their GitHub source for vulnerability scanning. (64ac442)
  • test: Fixes scanning of sbt projects with custom Scala configurations. (5765a12)
  • test: Fixes a bug where scanning Yarn workspaces could report vulnerabilities from a workspace member's dev dependencies as if they were production dependencies, when that member was consumed by a sibling package. (ade08e4)
  • test: Gracefully handle missing dotnet CLI during NuGet runtime resolution scans (f61edb3)
  • deps: Updates dependencies to fix vulnerabilities:

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by CircleCI, a new releaser for @鈥媠nyk/protect since your current version.


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [@snyk/protect](https://github.com/snyk/snyk) from 1.1187.0 to 1.1306.2.
- [Release notes](https://github.com/snyk/snyk/releases)
- [Commits](snyk/cli@v1.1187.0...v1.1306.2)

---
updated-dependencies:
- dependency-name: "@snyk/protect"
  dependency-version: 1.1306.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 6, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants