2.121.0

What changed in v2.121.0

Auto-generated from 6 repositories · 2026-08-19
Comparing v2.120.0 → v2.121.0

ℹ️ No changes in: gofrog

✨ New Features

• [build-info-go] RTECO-1536 - Add RubyGems FlexPack for native build-info collection (#394) 23e528d30b96 (@agrasth Naman)
• [jfrog-cli] Expose disable-token-refresh flag on jf login #3643 (@ehl-jf)
• [jfrog-cli] Add --legacy flag to jf login and jf c add #3655 (@ehl-jf)
• [jfrog-cli] Parse first User-Agent product segment for product_id and version #3662 (@sverdlov93)
• [jfrog-cli] RTECO-1784 - Add --project build-info e2e for agent plugins and skills #3650 (@udaykb2)
• [jfrog-cli] RTECO-1536 - Add jf ruby command for native RubyGems/Bundler support #3574 (@agrasth)
• [jfrog-cli] MLD-1373 - Add vscode harness to agent plugins e2e #3668 (@shay-coh)
• [jfrog-cli-artifactory] RTECO-1784 - Implement project flag in build info #529 (@udaykb2)
• [jfrog-cli-artifactory] RTECO-1536 - Add native RubyGems/Bundler command with auth and build-info #499 (@agrasth)
• [jfrog-cli-artifactory] MLD-1373 - Agent plugin install VS Code support #533 (@shay-coh)
• [jfrog-cli-core] Add disableTokenRefresh support to LoginCommand #1600 (@ehl-jf)
• [jfrog-cli-core] Add legacy flag to preserve per-service URL config for Artifactory v6.x #1605 (@ehl-jf)
• [jfrog-cli-security] Add risky tech callback guard after techs detection #852 (@eranturgeman)
• [jfrog-client-go] Add proportional refresh threshold for platform access tokens #1373 (@ehl-jf)

🐛 Bug Fixes

• [build-info-go] XRAY-157662 - fix npm peer dependency #413 (@Phavya-jfrog)
• [jfrog-cli] Fix jf api rejecting flags placed after the endpoint path #3651 (@ehl-jf)
• [jfrog-cli] JGC-453 - Fix documentation links #3407 (@cyrilc-pro)
• [jfrog-cli] XRAY-157662 - fix npm peer dependency #3660 (@Phavya-jfrog)
• [jfrog-cli-artifactory] RTECO-1777 - Fix install & update's --version related issue #528 (@udaykb2)
• [jfrog-cli-core] JGC-453 - Fix documentation links #1539 (@cyrilc-pro)
• [jfrog-cli-security] XRAY-156919 - CVS fallback for yarn and pnpm #837 (@gauriy-tech)
• [jfrog-cli-security] XRAY-156537 - Keep sbom-enrich running when a vulnerability has no CVE #847 (@Jordanh1996)
• [jfrog-cli-security] XRAY-157127 - Keep each package manager resolving against its own Artifactory repo #849 (@Jordanh1996)
• [jfrog-cli-security] XRAY-157755 - Fix insecure tls flag traversal for maven projects #846 (@gauriy-tech)

🔧 Internal Changes

• [jfrog-cli-security] Update dependencies for 1.34.1 #853 (@eranturgeman)

📦 Other Changes

• [jfrog-cli] jf-ide-setup-support-user-auth-tokens-for-curated-ai-editor-extensions #3667 (@reshmifrog)
• [jfrog-cli-artifactory] jf-ide-setup-support-user-auth-tokens-for-curated-ai-editor-extensions #531 (@reshmifrog)
• [jfrog-cli-core] Use proportional refresh threshold for platform access tokens #1601 (@ehl-jf)
• [jfrog-cli-security] XRAY-156683 Native support for pip, pipenv and poetry(curation-audit) #833 (@Phavya-jfrog)
• [jfrog-cli-security] XRAY-157301 - Apply the SAST exclude rules users configure #832 (@Jordanh1996)
• [jfrog-cli-security] XRAY-157581 - Stop reporting pre-existing SAST findings on every pull request #840 (@Jordanh1996)
• [jfrog-cli-security] XRAY-157581 - Stop reporting pre-existing SAST findings on every pull request #850 (@Jordanh1996)
• [jfrog-cli-security] Merge main into dev + update dependencies #851 (@Jordanh1996)

---

📊 Summary

Repository	Changes
jfrog-cli-security	11
jfrog-cli	10
jfrog-cli-artifactory	5
jfrog-cli-core	4
build-info-go	2
jfrog-client-go	1
Total	33

🔗 Module Version Changes

Module	From	To
build-info-go	v1.13.1-0.20260811071930-3b99d4a6c84b	v1.13.1-0.20260818195724-23e528d30b96
jfrog-cli-artifactory	v0.8.1-0.20260812053557-d311dd344da9	v0.8.1-0.20260819070735-a590327f2489
jfrog-cli-core	v2.60.1-0.20260811142039-2813ec601d92	v2.60.1-0.20260814125750-77deb9f6259c
jfrog-cli-security	v1.33.1	v1.34.1
jfrog-client-go	v1.55.1-0.20260811135712-2010f5075cc6	v1.55.1-0.20260813100550-0f2168d02558