Skip to content

feat(fix): add Amazon Bedrock provider to snyk fix --agentic#7012

Merged
ShawkyZ merged 1 commit into
mainfrom
chore/bump-remy-cli-extension-1.28.0
Jul 20, 2026
Merged

feat(fix): add Amazon Bedrock provider to snyk fix --agentic#7012
ShawkyZ merged 1 commit into
mainfrom
chore/bump-remy-cli-extension-1.28.0

Conversation

@ShawkyZ

@ShawkyZ ShawkyZ commented Jul 20, 2026

Copy link
Copy Markdown
Contributor

What

Bumps github.com/snyk/remy-cli-extension v1.23.1 → v1.28.0 in cliv2-private.

Why

Picks up in the embedded snyk fix --agentic extension:

  • Amazon Bedrock LLM provider (--provider bedrock) — AWS credential chain, Bedrock API key (AWS_BEARER_TOKEN_BEDROCK), or temporary-credential env triple.
  • Temperature-deprecation fix — the extension no longer sends the temperature parameter to any provider (current models, e.g. Anthropic Opus, reject it with 400 temperature is deprecated for this model).

Changes

  • cliv2-private/go.mod / go.sum: the version bump plus the transitive AWS SDK deps it pulls in — aws-sdk-go-v2/service/bedrockruntime v1.50.4 (also carries the security bump over the previously-pinned bedrockruntime), and refreshed aws-sdk-go-v2 core / config / credentials / sts / smithy-go.

No CLI source changes — dependency bump only.

@ShawkyZ
ShawkyZ requested a review from a team as a code owner July 20, 2026 08:49
@snyk-io

snyk-io Bot commented Jul 20, 2026

Copy link
Copy Markdown

Snyk checks have passed. No issues have been found so far.

Status Scan Engine Critical High Medium Low Total (0)
Open Source Security 0 0 0 0 0 issues
Licenses 0 0 0 0 0 issues
Code Security 0 0 0 0 0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

@snyk-pr-review-bot

This comment has been minimized.

Bumps remy-cli-extension v1.23.1 → v1.28.0, which adds the Amazon Bedrock
LLM provider (--provider bedrock) to the agentic fix flow — authenticating
via the AWS credential chain, a Bedrock API key (AWS_BEARER_TOKEN_BEDROCK),
or a temporary-credential env triple. Also drops the deprecated temperature
parameter from all provider requests (current models, e.g. Anthropic Opus,
reject it with a 400).

Pulls in the AWS SDK deps as transitive requirements
(aws-sdk-go-v2/service/bedrockruntime v1.50.4 and refreshed
config/credentials/sts/smithy-go).

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
@ShawkyZ
ShawkyZ enabled auto-merge July 20, 2026 08:50
@ShawkyZ
ShawkyZ force-pushed the chore/bump-remy-cli-extension-1.28.0 branch from edd4e94 to e1b7347 Compare July 20, 2026 08:50
@ShawkyZ ShawkyZ changed the title chore: bump remy-cli-extension to v1.28.0 feat: add Amazon Bedrock provider to snyk fix --agentic Jul 20, 2026
@ShawkyZ
ShawkyZ disabled auto-merge July 20, 2026 08:51
@ShawkyZ
ShawkyZ enabled auto-merge July 20, 2026 08:51
@ShawkyZ ShawkyZ changed the title feat: add Amazon Bedrock provider to snyk fix --agentic feat(fix): add Amazon Bedrock provider to snyk fix --agentic Jul 20, 2026
@ShawkyZ
ShawkyZ disabled auto-merge July 20, 2026 08:51
@snyk-pr-review-bot

Copy link
Copy Markdown

PR Reviewer Guide 🔍

🧪 No relevant tests
🔒 No security concerns identified
⚡ No major issues detected
📚 Repository Context Analyzed

This review considered 9 relevant code sections from 7 files (average relevance: 0.81)

🤖 Repository instructions applied (from AGENTS.md)

@ShawkyZ
ShawkyZ enabled auto-merge July 20, 2026 08:51
@ShawkyZ
ShawkyZ disabled auto-merge July 20, 2026 08:51
@ShawkyZ
ShawkyZ enabled auto-merge July 20, 2026 08:51
@ShawkyZ
ShawkyZ merged commit c3af54c into main Jul 20, 2026
9 of 11 checks passed
@ShawkyZ
ShawkyZ deleted the chore/bump-remy-cli-extension-1.28.0 branch July 20, 2026 09:28
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants