v1.1308.4

1.1308.4 (2026-11-04)

The Snyk CLI is being deployed to different deployment channels, users can select the stability level according to their needs. For details please see this documentation

Bug Fixes

• iac: Fixes a panic in snyk iac test when an ARM template contains a property with a null value. (fbae7febd)
• maven: Fixes --include-component-metadata dropping the distribution:url label for every Maven dependency when using Maven 3.10. (c783feecc)
• language server: Bug fixes for Snyk Language Server used by the Snyk IDE plugins. (ef0db2c0b)
• deps: Updates dependencies to fix vulnerabilities:
  • Updates the Open Policy Agent library used by snyk iac test to address CVE-2025-46569 (126998855)
  • Updates moby/buildkit to 0.31.2 to address CVE-2026-15788 and CVE-2026-61711 (130ecc217)
  • Updates klauspost/compress to 1.20.2 and go-jose/v4 to 4.1.6 to address CVE-2026-116591 and CVE-2026-116587 (df49f1bd4)
  • Updates golang.org/x/net to 0.62.0 to address CVE-2026-78661 (9857f314c)