[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
@snyk/protect	^1.1307.4 → ^1.1308.0

---

Release Notes

snyk/snyk (@​snyk/protect)

v1.1308.0

Compare Source

The Snyk CLI is being deployed to different deployment channels, users can select the stability level according to their needs. For details please see this documentation

Features

• code, secrets: snyk code test and snyk secrets test can now generate an HTML report. Use --html to print it to stdout, or --html-file-output=<path> to write it to a file. (0e10434, af6a2a4)
• agent-scan: The experimental snyk agent-scan command now reports risk indicators instead of issue codes. If you post-process its --json output, update your scripts to the new format. (d5451a6)

Bug Fixes

• sbom: Maven and Gradle SBOMs, and --print-graph, no longer stall on large multi-module builds. They now finish seconds after the build tool exits. On projects with dependency cycles, the output may contain extra pruned: cyclic placeholder nodes. No packages or dependency edges are dropped. (73f038c)
• test: Gradle projects with very deep inter-module dependency chains no longer fail with a stack overflow. (fc4f8ec, ce4e5d6)
• test: .NET scans fall back to legacy scanning when the .NET SDK isn't installed. They also handle projects restored in a different build directory, and work when global NuGet source-mapping rules are configured. (b8461c8)
• test: .NET scans no longer fail with NU1101 on SDK installs that lack the app host pack, such as distro-packaged SDKs. (1fd1fa4)
• test: .NET projects whose PackageReference uses a lowercase version attribute are now parsed correctly. (108f8ca)
• test: Projects built with Gradle 4.0 to 4.6 no longer fail to scan. (1070653)
• deps: Updates dependencies to fix vulnerabilities:
  • CVE-2026-102276 (8cfe5c7)
  • CVE-2026-102278 (8cfe5c7)
  • CVE-2026-93748 (c7378bc)
  • CVE-2026-93750 (c7378bc)

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	@​snyk/​protect@​1.1307.4 ⏵ 1.1308.0	+1			+1

View full report