From 9b262a27c478eea7107bcab5113e0d04a1307bff Mon Sep 17 00:00:00 2001 From: CatalinSnyk Date: Wed, 20 May 2026 14:41:30 +0300 Subject: [PATCH 1/2] fix: revert "feat: Linux ARM64 and AMD64 binaries are now statically linked" --- .circleci/config.yml | 19 ++----------------- cliv2/Makefile | 5 ----- 2 files changed, 2 insertions(+), 22 deletions(-) diff --git a/.circleci/config.yml b/.circleci/config.yml index 8f34d4c9e3..22cb182125 100644 --- a/.circleci/config.yml +++ b/.circleci/config.yml @@ -602,7 +602,7 @@ workflows: go_target_os: linux go_os: linux go_arch: amd64 - static_binary: true + static_binary: false # TODO: set to true when we have confidence for v1.1304.0 release go_download_base_url: << pipeline.parameters.go_download_base_url >> executor: docker-amd64-xl requires: @@ -645,7 +645,7 @@ workflows: go_target_os: linux go_os: linux go_arch: arm64 - static_binary: true + static_binary: false # TODO: set to true when we have confidence for v1.1304.0 release go_download_base_url: << pipeline.parameters.go_download_base_url >> executor: docker-arm64-xl requires: @@ -1144,20 +1144,6 @@ workflows: - '/release.*/' - '/.*e2e.*/' - - test-release-static: - name: e2e snyk-linux tests (scratch-container-amd64) - context: - - team_hammerhead-cli - requires: - - upload version - cli_download_base_url: << pipeline.parameters.cli_download_base_url >> - filters: - branches: - only: - - main - - '/release.*/' - - '/.*e2e.*/' - - noop: name: Start Deployments requires: @@ -1180,7 +1166,6 @@ workflows: - e2e fips tests (win-server2022-amd64) - e2e experimental tests (linux-static-amd64) - e2e experimental tests (scratch-container-amd64) - - e2e snyk-linux tests (scratch-container-amd64) filters: branches: only: diff --git a/cliv2/Makefile b/cliv2/Makefile index 5f4cca958e..b632245413 100644 --- a/cliv2/Makefile +++ b/cliv2/Makefile @@ -92,11 +92,6 @@ V1_BUILD_TYPE = build:prod V1_BINARY_FOLDER = ts-cli-binaries # default to empty string, which means no subfolder V1_BINARY_SUBFOLDER = -# ensures we set the correct ts-cli-binaries subfolder for static node binaries -# when STATIC_NODE_BINARY=true is passed to the make command -ifeq ($(STATIC_NODE_BINARY), true) - V1_BINARY_SUBFOLDER = experimental/ -endif HASH_STRING = $(HASH)$(HASH_ALGORITHM) SIGN_SCRIPT = $(WORKING_DIR)/scripts/sign_$(_GO_OS).sh ISSIGNED_SCRIPT = $(WORKING_DIR)/scripts/issigned_$(_GO_OS).sh From efce6dee3e456cfa68bdc51026d3b68d72bee976 Mon Sep 17 00:00:00 2001 From: CatalinSnyk Date: Wed, 20 May 2026 15:10:37 +0300 Subject: [PATCH 2/2] chore: update release notes --- binary-releases/RELEASE_NOTES.md | 18 ++---------------- 1 file changed, 2 insertions(+), 16 deletions(-) diff --git a/binary-releases/RELEASE_NOTES.md b/binary-releases/RELEASE_NOTES.md index 2241e2b7d8..c7bd847e2e 100644 --- a/binary-releases/RELEASE_NOTES.md +++ b/binary-releases/RELEASE_NOTES.md @@ -1,22 +1,8 @@ -## [1.1305.0](https://github.com/snyk/snyk/compare/v1.1304.3...v1.1305.0) (2026-05-20) +## [1.1305.1](https://github.com/snyk/snyk/compare/v1.1305.0...v1.1305.1) (2026-05-20) The Snyk CLI is being deployed to different deployment channels, users can select the stability level according to their needs. For details please see [this documentation](https://docs.snyk.io/snyk-cli/releases-and-channels-for-the-snyk-cli) -### Features - -* **sbom**: Introduces the `--allow-incomplete-sbom` flag for `snyk sbom`, allowing the SBOM to be generated even when individual projects fail to resolve. Failed projects are surfaced as per-project errors alongside the successful results. ([29ba128](https://github.com/snyk/snyk/commit/29ba128c55afd9f41cfd0ffabe667c013b10a544)) -* **container**: Speed up `snyk container monitor` by sending dependency requests in parallel, configurable via the `SNYK_REQUEST_CONCURRENCY` environment variable. ([186c5fb](https://github.com/snyk/snyk/commit/186c5fb6b7c074d94bb9e5d4094f1909671c6f88), [6764f65](https://github.com/snyk/snyk/commit/6764f65247bb3c1c82ad5d8d3d331ba21f7c4a97)) -* **general**: Linux ARM64 and AMD64 binaries are now statically linked by default. ([f02b850](https://github.com/snyk/snyk/commit/f02b850ac8a4b6f527448874d5408ab1cfffeaab)) -* **mcp**: Adds an experimental breakability evaluation tool to the Snyk MCP Server. ([69806f5](https://github.com/snyk/snyk/commit/69806f5634b06551d46debb070553e454cf9ed54)) - ### Bug Fixes -* **test**: Fixes resolution of aliased npm packages so the alias from the lockfile is used instead of the target package name. ([9b0e4d9](https://github.com/snyk/snyk/commit/9b0e4d913af096aa1c5a8ce46e3ed1bd5d211e8f)) -* **test**: Fixes parsing of Python `.whl` files when scanning projects with `--all-projects`. ([12ac0db](https://github.com/snyk/snyk/commit/12ac0dbb46b64526c584a13892317c80111a1d1a)) -* **deps**: Updates dependencies to fix vulnerabilities: - - CVE-2026-34165 ([1eec8f8](https://github.com/snyk/snyk/commit/1eec8f81e4738985a92dd8e9823e1ab846713fe7)) - - CVE-2026-33762 ([1eec8f8](https://github.com/snyk/snyk/commit/1eec8f81e4738985a92dd8e9823e1ab846713fe7)) - - CVE-2025-62718 ([0c4bdcc](https://github.com/snyk/snyk/commit/0c4bdcc0936bf3ba05e985895d7b44e9a1fcc962)) - - CVE-2026-6321 ([2670813](https://github.com/snyk/cli/commit/26708138ce5208bbd058c87bdccf5cd350d1a2c2)) - - CVE-2026-6322 ([2670813](https://github.com/snyk/cli/commit/26708138ce5208bbd058c87bdccf5cd350d1a2c2)) +* **general**: Reverted change to make Linux arm64 and amd64 statically linked due to issues with the binaries ([9b262a27c](https://github.com/snyk/snyk/commit/9b262a27c478eea7107bcab5113e0d04a1307bff))