megachangelog
Improvement1.1307.3

Snyk CLI v1.1307.3

Snyk CLI v1.1307.3 includes bug fixes and improvements for policy file handling, multi-project scanning, and JAR manifest detection, plus security patches for three CVEs.

We are pleased to announce Snyk CLI release, v1.1307.3

This release contains fixes and minor improvements. To learn more beyond what is highlighted below, please reference the full release notes.

This update includes the following:

  • snyk test now reports an unreadable .snyk policy file as SNYK-POLICY-0002 with a message identifying the problem, instead of an unspecified error.

  • snyk test --all-projects now resolves each project's .snyk policy from that project's own directory, instead of applying the scan root's policy to every project.

  • snyk test --scan-all-unmanaged no longer fails with exit code 2 when scanning a directory of JARs with no manifest file.

  • Fixed vulnerabilities:

If you have any questions, feel free to reach out to the Snyk support team. We encourage everyone to upgrade to the latest version to take advantage of these improvements.

clibug-fixessecuritypolicyscanning

Source: original entry ↗

More from Snyk

Follow Snyk to get its new changes in your feed and email digest.

Announcement1.1308.1

Snyk CLI v1.1308.1 released

HTML report output is now available by default without preview features, and project names are consistently displayed in test summaries. This release also patches multiple security vulnerabilities.

clisecurityhtml-reportsvulnerability-fixes
Improvement

Pending ignore requests now visible on Project's Issues page

Issues with pending ignore requests now display a clear "Pending Ignore Request" status on the Issues page and in issue details, with filtering support. The issues API now reports pending as part of an issue's ignore status for programmatic distinction of open, pending, and ignored findings.

issuesignore-workflowapivisibilityfiltering
ImprovementOctober 2026

Snyk Code October update: improved analysis and more findings

Snyk Code now analyzes projects more deeply and accurately across Java, Kotlin, Go, TypeScript, JavaScript, Python, C#, PHP and Ruby, with significantly more findings reported. Improvements include better import resolution via config files, corrected PHP typing, expanded library coverage, new vulnerability detection rules, and enhanced template and serverless application analysis.

code-analysissastsecurityvulnerability-detectionmulti-language
See all Snyk changes →