From a3a00f7256b33bcd4786324e3a39587581ce32e0 Mon Sep 17 00:00:00 2001 From: Robert Rakhmatullin Date: Fri, 14 Aug 2026 01:11:02 +0100 Subject: [PATCH 1/2] chore: bump cli-extension-cos --- cliv2-private/go.mod | 2 +- cliv2-private/go.sum | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/cliv2-private/go.mod b/cliv2-private/go.mod index 2ef7f0e48f..975600d859 100644 --- a/cliv2-private/go.mod +++ b/cliv2-private/go.mod @@ -5,7 +5,7 @@ go 1.26.5 require ( github.com/snyk/ambient-canary v0.0.0-20260722064253-fba619a134a9 github.com/snyk/cli-extension-axi v0.0.0-20260812113949-210b479505a9 - github.com/snyk/cli-extension-cos v0.0.0-20260804092425-a7e642ae7b3b + github.com/snyk/cli-extension-cos v0.0.0-20260813100139-4d5c43e0785f github.com/snyk/cli/cliv2 v0.0.0 github.com/snyk/remy-cli-extension v1.36.1 github.com/snyk/rift-cli-extension v1.1.1 diff --git a/cliv2-private/go.sum b/cliv2-private/go.sum index b0a9bf17a9..e52faf9efa 100644 --- a/cliv2-private/go.sum +++ b/cliv2-private/go.sum @@ -570,8 +570,8 @@ github.com/snyk/cli-extension-ai-bom v0.0.0-20260813135431-38a363dae403 h1:AC9Tj github.com/snyk/cli-extension-ai-bom v0.0.0-20260813135431-38a363dae403/go.mod h1:ieThzrb8z/Z88cDKdfqdfGh01xs6RkDKt5LbA+AE6U8= github.com/snyk/cli-extension-axi v0.0.0-20260812113949-210b479505a9 h1:6/YF4VHeT8E3abcxcF/oIrdEyrPM3fV/OfJOsZuYz5g= github.com/snyk/cli-extension-axi v0.0.0-20260812113949-210b479505a9/go.mod h1:oFvcbCp2bb4gPBDbFPnqGxmFTkQEcPolXTbif5hJ1FE= -github.com/snyk/cli-extension-cos v0.0.0-20260804092425-a7e642ae7b3b h1:NXYzKYaGgB7OcGq4rV1GrmyGI+F7V8lpXaW50NQw4f4= -github.com/snyk/cli-extension-cos v0.0.0-20260804092425-a7e642ae7b3b/go.mod h1:YpcOdcMBJOzwtla/OOoBOArx27Bc2v42Vcwd/FeGl9M= +github.com/snyk/cli-extension-cos v0.0.0-20260813100139-4d5c43e0785f h1:in98PD78zmxOtxoNr3kQNTDN5Sm4gbDImMLH+EZuZrk= +github.com/snyk/cli-extension-cos v0.0.0-20260813100139-4d5c43e0785f/go.mod h1:YpcOdcMBJOzwtla/OOoBOArx27Bc2v42Vcwd/FeGl9M= github.com/snyk/cli-extension-dep-graph/v2 v2.8.1 h1:ZlLN8KbMZiRN7QsiLzovFLsoIEVytC77+OESr+6wDhI= github.com/snyk/cli-extension-dep-graph/v2 v2.8.1/go.mod h1:I0GXbV6Rk8T0AEC9EugE4AgYE5SbDn0m0bGgAjZqy5U= github.com/snyk/cli-extension-iac v0.0.0-20260515092252-505c498f1077 h1:lteivlSoQL0zYyFcGQjEPZcQgDkzM5PcgIHlIgzRuhg= From b05501df444fed7e058a78dae350fa4f2c9f4518 Mon Sep 17 00:00:00 2001 From: "snyk-prodsec-orb[bot]" Date: Sun, 16 Aug 2026 15:44:16 +0000 Subject: [PATCH 2/2] fix: remediate high-and-above vulnerabilities blocking the Snyk Open Source gate Applied by snyk fix --agentic via the Snyk ProdSec CircleCI orb, from chore/bump-cli-extension-cos at a3a00f7256b33bcd4786324e3a39587581ce32e0. These changes are generated. Review them before merging. --- cliv2-private/go.mod | 2 +- cliv2/go.mod | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/cliv2-private/go.mod b/cliv2-private/go.mod index 975600d859..717e170210 100644 --- a/cliv2-private/go.mod +++ b/cliv2-private/go.mod @@ -1,6 +1,6 @@ module github.com/snyk/cli/cliv2-private -go 1.26.5 +go 1.26.6 require ( github.com/snyk/ambient-canary v0.0.0-20260722064253-fba619a134a9 diff --git a/cliv2/go.mod b/cliv2/go.mod index 55abc0d69d..5f5e6ffc9c 100644 --- a/cliv2/go.mod +++ b/cliv2/go.mod @@ -1,6 +1,6 @@ module github.com/snyk/cli/cliv2 -go 1.26.5 +go 1.26.6 require ( github.com/elazarl/goproxy v1.7.2