#547 chore(deps): update dependency @snyk/protect to v1.1294.2 Pull request opened by renovate[bot] This PR contains the following updates: | Package | Change | Age | Adoption | Passing | Confidence | | ------------------------------------------------------ | ------------------------------------------------------------------------------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | [@snyk/protect](https://redirect.github.com/snyk/snyk) | [1.1186.0 -> 1.1294.2](https://renovatebot.com/diffs/npm/@snyk%2fprotect/1.1186.0/1.1294.2) | [[age](https://camo.githubusercontent.com/ef118efeaaf458c2f35825e49c2440ca19b518d0cc4056ddf01fc369b7fa8dd4/68747470733a2f2f646576656c6f7065722e6d656e642e696f2f6170692f6d632f6261646765732f6167652f6e706d2f40736e796b25326670726f746563742f312e313239342e323f736c696d3d74727565)](https://docs.renovatebot.com/merge-confidence/) | [[adoption](https://camo.githubusercontent.com/21eff78f8e3a98b44e2ba76070a446b1e1e410fe1076959a7fd437cc7d346668/68747470733a2f2f646576656c6f7065722e6d656e642e696f2f6170692f6d632f6261646765732f61646f7074696f6e2f6e706d2f40736e796b25326670726f746563742f312e313239342e323f736c696d3d74727565)](https://docs.renovatebot.com/merge-confidence/) | [[passing](https://camo.githubusercontent.com/ba9ff64de40c0c6062e71d5f4e36602d4a002f88cb39cc762614619481d60e79/68747470733a2f2f646576656c6f7065722e6d656e642e696f2f6170692f6d632f6261646765732f636f6d7061746962696c6974792f6e706d2f40736e796b25326670726f746563742f312e313138362e302f312e313239342e323f736c696d3d74727565)](https://docs.renovatebot.com/merge-confidence/) | [[confidence](https://camo.githubusercontent.com/c2f33894139b1b1390d61b7bd8d4427d0eb5f38f93474da31ee80ff4228d6fec/68747470733a2f2f646576656c6f7065722e6d656e642e696f2f6170692f6d632f6261646765732f636f6e666964656e63652f6e706d2f40736e796b25326670726f746563742f312e313138362e302f312e313239342e323f736c696d3d74727565)](https://docs.renovatebot.com/merge-confidence/) | --- Release Notes snyk/snyk (@​snyk/protect) `v1.1294.2` Compare Source The Snyk CLI is being deployed to different deployment channels, users can select the stability level according to their needs. For details please see this documentation Bug Fixes • container: ignore npm/yarn default cache directories • container: fix: avoid possible unhandled promise rejections `v1.1294.1` Compare Source Bug Fixes • container: unable to process RedHat images when the “content_sets” attribute was missing in the redhat-content-manifests file. (https://github.com/snyk/snyk-docker-plugin/pull/615) • container: skip optional dependencies when testing Python projects to prevent "too many vulnerable paths for conversion to legacy test output" error (https://github.com/snyk/snyk-docker-plugin/pull/614) • container, test, monitor prevents "Invalid JSON" being produced when debugging is enabled and policies are being applied. (https://github.com/snyk/cli/pull/5583) `v1.1294.0` Compare Source The Snyk CLI is being deployed to different deployment channels, users can select the stability level according to their needs. For details please see this documentation News • CycloneDX 1.6 SBOM support This new version now supports generating CycloneDX 1.6 SBOMs using the

snyk sbom

command, providing you with more comprehensive and detailed information about your software components and their dependencies. Read more about the CycloneDX version announcement here. • Improved CLI monitoring of large Cocoapods projects When doing a

snyk monitor

on very large Cocoapods applications, the CLI sometimes returned an

Invalid String OOM

error and the operation would fail. Although this error was rare, we have fixed it so large Cocoapods applications can now be monitored successfully. • Fix for security issue The Snyk CLI before 1.1294.0 is vulnerable to Code Injection when scanning an untrusted (PHP|Gradle) project. The vulnerability can be triggered if Snyk test is run inside the untrusted project due to the improper handling of the current working directory name. Snyk always recommends not scanning untrusted projects. Features • sbom: add CycloneDX 1.6 SBOM support (1330fc2) • deployment: Deploy alpine arm64 binaries (9daace4) • monitor: enable cocoapods to send graphs for cli monito… pact-foundation/pact-js-core GitHub Actions: release_dry_run ✅ 29 other checks have passed 29/30 successful checks