## snyk/cli — v1.1306.4…v1.1307.0

_279+ commits._

### Features
- **feat: gate snyk agent commands behind --experimental** (20bc828)
- **feat: wire live Configuration into analytics instrumentation** (ef3bfd9)
- **Merge pull request #7143 from snyk/chore/remove-container-new-facts-ff** (7e19804)
- **Merge branch 'main' into chore/remove-container-new-facts-ff** (c068bfa)
- **Merge branch 'main' into chore/remove-container-new-facts-ff** (f5a7b89)
- **feat: allow SBOM --monitor opt-in at group level [OSF-466]** (6cf2879)
- **feat(container): surface provenance attestations behind feature flag [PRIM-100]** (0c444b0)
- **feat: allow secrets exclusions [PS-715]** (917bbc5)
- **feat: file filter doesn't exclude tracked files though .gitignore rules** (c82ae60)
- **feat: add rift extension [RIFT-92]** (10aa3c2)
- **feat: bump GAF for reviewedBy and reviewedOn fields** (5585ea6)
- **feat: [OSM-3866] bump snyk-nuget-plugin** (46cf92c)
- **feat: resolve Gradle distribution URLs on a warm cache** (5222e56)
- **Merge pull request #7074 from snyk/chore/add-prodsec-orb-runtime-context** (47db700)
- **feat: add snyk cos commands for continuous offensive security** (abd4fd2)

### Fixes
- **Merge pull request #7162 from snyk/fix/CLI-1771-harness-name-version-split** (b9f351e)
- **fix: surface command timeouts correctly for unified test scanner [OSF-452]** (095aefb)
- **Merge pull request #7154 from snyk/fix/cli-1784** (cc6ec3e)
- **fix(wrapper): preserve integration name** (1cf32e2)
- **Merge pull request #7119 from snyk/fix/CLI-1757-upgrade-gaf** (26f0543)
- **fix: upgrade GAF** (c3b870d)
- **Merge pull request #7125 from snyk/fix/gradle-cme-bump-snyk-gradle-plugin** (328a9b3)
- **fix: resolve Gradle 7.4-8.2 dependency-scan crash** (a0e33f8)
- **fix: bump snyk-nodejs-plugin to 2.2.1 for pnpm 11 lockfile support** (a75c5e0)
- **fix: improve error messages for network and proxy failures** (5d2951a)
- **Merge pull request #7109 from snyk/fix/CLI-1759_go_git** (7bfdde5)
- **fix(dependencies): Fix CVE-2026-71557 in public binary** (fc6181f)
- **Merge pull request #7106 from snyk/fix/CLI-1754** (c3e52bd)
- **fix: update embedded OpenSSL runtime** (a1db5cc)
- **fix: ignore .git in find-files.ts** (127db7d)
- **Merge pull request #7054 from snyk/feat/AG-387-trial-agentic-fix** (08be579)
- **Merge pull request #7080 from snyk/fix/CLI-1711** (e90420e)
- **fix(ci): preserve uv lockfile line endings** (5ecbaf0)
- **Merge pull request #7064 from snyk/fix/bundle_deduplication_observability_and_add_fua_code_test** (186a75f)
- **fix: add user journey tests for FUA code path + bump code-client-go** (388ecb5)
- **Merge pull request #7061 from snyk/fix/integrate_snyk_code_with_fua_by_bumping_ccg_and_gaf** (374e5b7)
- **fix: bump gaf and ccg to integrate snyk code with file-upload-api** (f648f73)
- **Merge pull request #7058 from snyk/chore/bump-remy-extension-ci-fix-report** (2072df4)

### Backend
- **Merge pull request #7173 from snyk/docs/manual-gitbook-update** (8e67f44)
- **Merge pull request #7174 from snyk/chore/cherry-pick-agent-experimental-gate-rc** (8f5e760)
- **Merge pull request #7168 from snyk/chore/cherry-pick-fixes-for-rc** (d606584)
- **Merge pull request #7159 from snyk/tmp/1787227336-release-candidate** (802b93f)
- **Merge pull request #7156 from snyk/chore/CLI-1786-bump-code-client-go** (22d3158)
- **Merge pull request #7157 from snyk/chore/AG-403-bump-studio-mcp** (e9ced4b)
- **Merge pull request #7149 from snyk/chore/bump-gaf-asset-link** (f89582b)
- **Merge pull request #7153 from snyk/gergo-codes/cmpa-698-bump-dep-graph-extension** (20f306f)
- **Merge pull request #7147 from snyk/chore/bump-cli-extension-cos-drop-experimental** (6d43c9b)
- **Merge pull request #7150 from snyk/chore/CLI-1743_post_invoke_hooks** (8879fa2)
- **Merge pull request #7152 from snyk/chore/bump-cli-extension-axi-tidy** (b2ec414)
- **Merge pull request #7142 from snyk/feat/analytics-configuration-redaction** (2e23fd4)
- **Merge pull request #7148 from snyk/feat/osf-466/upgrade-flows-and-sbom-extensions** (3d2d98a)
- **Merge pull request #7141 from snyk/chore/CLI-1766** (54eeba3)
- **Merge pull request #7144 from snyk/chore/bump-up-cli-aibom-version** (6f95854)
- **Merge pull request #7132 from snyk/chore/bump-cli-extension-cos** (a33c23e)
- **Merge pull request #7139 from snyk/chore/upgrade_go** (4affb2f)
- **Merge pull request #7122 from snyk/chore/cli-1722_file_filter_configuration_for_ai_bom_extension** (b5b3af5)
- **Merge pull request #7095 from snyk/chore/automatic-upgrade-of-ls** (33e0cfa)
- **Merge pull request #7129 from snyk/chore/CLI-1772_gomod** (0075db6)
- **Merge pull request #7098 from snyk/PRIM-100/cli-provenance-attestations-ff-9.19.0** (1930713)
- **Merge pull request #7127 from snyk/docs/update_main_1.1306.4** (1c81a26)
- **Merge branch 'release-candidate' into chore/update_main_1.1306.4** (8085356)
- **Merge pull request #7124 from snyk/release/1.1306** (2f2ebd0)
- **Merge pull request #7118 from snyk/chore/CLI-1696_trigger_axi_publish** (237a02c)
- **Merge branch 'main' into chore/CLI-1696_trigger_axi_publish** (3a18886)
- **Merge pull request #7114 from snyk/feat/CLI-1700** (020599b)
- **Merge pull request #7115 from snyk/chore/OSM-3869-bump-cli-extension-sbom** (9ff39e7)
- **Merge pull request #7113 from snyk/feat/PS-715/secrets-exclusions** (47321b3)
- **Merge branch 'main' into feat/PS-715/secrets-exclusions** (21cef7d)
- **Merge pull request #7093 from snyk/chore/bump-snyk-nodejs-plugin-2.2.1** (b2c35b4)
- **Merge pull request #7112 from snyk/chore/fix_SNYK-JS-JSYAML-18593780** (55ff997)
- **Merge pull request #7076 from snyk/chore/CLI-1740** (193a08e)
- **Merge pull request #7091 from snyk/feat/WR-1221/network-error-handler-enhancement** (4599673)
- **Merge pull request #7108 from snyk/chore/bump-studio-mcp-1.15.3** (4d472b5)
- **Merge pull request #7085 from snyk/feat/cli-1411_dont_ignore_tracked_files** (86f304f)
- **Merge pull request #7096 from snyk/chore/CLI-1737** (7c1656c)
- **Merge pull request #7092 from snyk/feat/osm-3866-bump-nuget-plugin** (be1950e)
- **Merge branch 'main' into feat/osm-3866-bump-nuget-plugin** (6c8616e)
- **Merge pull request #7097 from snyk/chore/CLI-1695** (4bf8b00)
- **Merge pull request #7094 from snyk/feat/rift-cli-extension** (77c0112)
- **Merge pull request #7013 from snyk/docs/automatic-gitbook-update-cli-help-main** (a0966e9)
- **Merge pull request #7086 from snyk/feat/bump-gaf-2** (a2b199f)
- **Merge pull request #7090 from snyk/chore/update_main_1.1306.3** (bd9331f)
- **Merge branch 'main' into chore/update_main_1.1306.3** (6b58fa3)
- **Merge pull request #7057 from snyk/test/drift-output-colour-independent** (278c62c)
- **Merge pull request #7062 from snyk/docs/unit-test-token-requirement** (4cfa584)
- **Merge branch 'release-candidate' into chore/update_main_1.1306.3** (c745203)
- **Merge pull request #7048 from snyk/test/poetry-component-metadata** (70bc81c)
- **Merge pull request #7049 from snyk/feat/gradle-include-component-metadata** (ce8f921)
- **Merge pull request #7052 from snyk/chore/PS-715/dotsnyk-exclusions-secrets** (c9683be)
- **Merge pull request #7082 from snyk/chore/CLI-1717-bump-code-client-go** (8a1ae68)
- **Merge pull request #7078 from snyk/chore/bump-cli-extension-cos** (7fe3961)
- **Merge pull request #7079 from snyk/chore/bump-cli-extension-ai-bom** (3b9cfbe)
- **Merge pull request #7070 from snyk/chore/automatic-upgrade-of-ls** (43289e1)
- **Merge pull request #7077 from snyk/chore/fix_CVE-2026-69152** (b3f15e2)
- **Merge pull request #7072 from snyk/v0.5.16-agent-scan-cli-exten** (a23003a)
- **Merge pull request #7065 from snyk/chore/bump_gaf** (8cdc4ca)
- **Merge pull request #7068 from snyk/docs/improve_agents_md** (f5314aa)
- **Merge pull request #7046 from snyk/chore/automatic-upgrade-of-ls** (aff4313)
- **Merge pull request #7066 from snyk/chore/bump-remy-extension-1.36.1** (9a333cb)
- **Merge pull request #7053 from snyk/feat/cos-cli-extension** (29b1552)
- **Merge pull request #7055 from snyk/chore/bump-remy-extension-1.33.0** (297fcde)

### Tests
- **test: add AXI user journey tests for agent subcommand** (e8de001)
- **test: make drift output test independent of colour detection** (470ba5a)
- **test: cover --include-component-metadata for poetry projects** (007cf40)

### Docs
- **docs: synchronizing help from snyk/user-docs** (ee58099)
- **docs: update RELEASE_NOTES.md** (40e24cb)
- **docs: update RELEASE_NOTES.md** (0fd2445)
- **docs: update release notes** (e5c5805)
- **docs: synchronizing help from snyk/user-docs** (dfff12a)
- **docs: document that unit tests require TEST_SNYK_TOKEN** (4ef326e)
- **docs: Clarify development and testing steps in agents.md** (3feaabc)

### Chore
- **chore: automatic integration of language server a207e801a57ee57d2989eff52204f81b3c7e653a** (7c272e5)
- **chore: Bump code-client-go to record GetFilters API duration** (aa6878c)
- **chore(mcp): bump studio-mcp version to bring Secrets to full profile** (1d2848e)
- **chore: bump extensions for SBOM per-component results** (8e50c4b)
- **chore: bump cli-extension-dep-graph to v2.10.0** (dca7d2d)
- **chore: bump cli-extension-cos** (b46d86e)
- **chore: bump gaf for postInvokeHooks** (efc390f)
- **chore: bump cli-extension-axi to latest main** (0bd6eef)
- **chore: bump GAF for improved FileFilter metrics** (7f5da3a)
- **chore: bump up cli aibom version** (a429c2e)
- **chore: remove allowNewContainerFacts feature flag** (ade661b)
- **chore: bump cli-extension-cos** (6043569)
- **chore: update Go version** (1a1ed04)
- **chore: use invocation context file filter for ai-bom extension** (d15a829)
- **chore: automatic integration of language server c5325e83686805ae647bf9f9dbf9d35f9b77c9d5** (fc476c4)
- **chore(ci): detect and avoid version drifts in public and private go.mod** (0ce5954)
- **chore: sync dependencies** (e5651b0)
- **refactor(container): remove feature flag and pin snyk-docker-plugin** (60c2f64)
- **chore: trigger axi npm package build on CLI release** (2be4db3)
- **chore: bump cli-extension-sbom for pruned SBOM graph [OSM-3869]** (ecf0da3)
- **chore: upgrade dependency to fix SNYK-JS-JSYAML-18593780** (b1ed42e)
- **chore: bump GAF to start collecting FileFilter metrics** (07d1014)
- **chore: bump studio-mcp to 1.15.3 for fixes** (e7c077e)
- **chore: add unit tests for find-files** (f629867)
- **chore(ci): enable the agentic Open Source fix [AG-387]** (5d057cc)
- **chore: integrate cli-extension-axi in the CLI binary** (b98420c)
- **chore: bump secrets extensions to allow exclusions [PS-715]** (6887b86)
- **chore: bump code-client-go - get file filter from invocation context** (30d2a18)
- **chore: bump cli-extension-cos and extend its acceptance tests** (ffc3278)
- **chore: bump cli-extension-ai-bom, fixing dependency issue in html view** (ab7f93f)
- **chore: automatic integration of language server 865b318b1c8f21f7bccdb855e31e8fc8defacb36** (f29f663)
- **chore(deps): upgrade dependency to fix CVE-2026-69152** (0eee288)
- **chore: add prodsec-orb-runtime context to config.yaml [PRODSEC-10647]** (6f14f1c)
- **chore: update agent-scan CLI extension version [ADS-806]** (da9354e)
- **chore: bump GAF** (cb02221)
- **chore: automatic integration of language server 84952efebbacbcc6979392fa841bf05ab64ee7dd** (7fc0346)
- **chore: bump remy-cli-extension to v1.36.1** (3afeba7)
- **chore: bump remy-cli-extension to v1.34.0** (568d524)
- **chore: bump remy-cli-extension to v1.33.0** (524b77f)

_Recap by [Repo Wrapped](https://repowrapped.com/gh/snyk/cli?utm_source=github-action)._