build(deps-dev): bump snyk from 1.1296.0 to 1.1299.1

[dependabot[bot]]

Bumps snyk from 1.1296.0 to 1.1299.1.

Release notes

Sourced from snyk's releases.

v1.1299.1

1.1299.1 (2025-09-24)

The Snyk CLI is being deployed to different deployment channels, users can select the stability level according to their needs. For details please see this documentation

Bug Fixes

• language-server: Fix titles of Snyk Open Source code actions in IDEs (0add44d)
• code: Include missing uploadResults property in Sarif output (693e548)
• logging: Fix broken debug logs due to incorrect redaction (0cf19a7)

v1.1299.0

1.1299.0 (2025-08-28)

The Snyk CLI is being deployed to different deployment channels, users can select the stability level according to their needs. For details please see this documentation.

Features

• auth: Support for PAT auto region configuration. (ad8e4a7)

Bug Fixes

• code: Fixes code test --report when a project_id environment variable exists. (6168b1d)
• code: Fixes an issue with snyk code test where an empty input parameter would cause inconsistent behavior. (a661235)
• container: Stops spawning commands using a shell. (7ee9e15)
• dependency: Fixes CVE-2025-8959. (5a548fb)
• general: Fixes a bug where formatting of log timestamps could cause a crash in some cases. (92fa8be)
• iac: Fixes wrong status code checks. (77152e5)
• language-server: Fixes a bug related to the analytics environment variables. (6916af8)
• language-server: Correctly populates the environment for Open Source scans when called from the IDE. (945b029)
• language-server: Ensures changed API URLs are respected during authentication. (24ed981)
• language-server: MCP tool updates to support feedback and better tool descriptions. (8f2a8d1)
• test: Fixes a bug where project.assets.json files would not be detected in cases where it's destination path was altered with .NET properties. (75a152e)
• test: Improves error messages when using --all-projects. (960fa8e)

v1.1298.3

1.1298.3 (2025-08-14)

The Snyk CLI is being deployed to different deployment channels, users can select the stability level according to their needs. For details please see this documentation

News

• aibom: This command is now publicly available. Note that the feature is still experimental and subject to breaking changes without notice.

• Effective with release (Snyk CLI 1.1298.0), the minimum required GNU C Library (glibc) versions on Linux will be updated as follows:

  • For Linux x64 environments: glibc version 2.28 or higher
  • For Linux arm64 environments: glibc version 2.31 or higher

• If this affects you, please follow the advice here. Possible issues are errors mentioning GLIBC_2.27 or GLIBC_2.31 not found.

Bug Fixes

... (truncated)

Commits

• fe4403b Merge pull request #6183 from snyk/fix/min_macos_version
• afdf268 fix: explicitly set minimum macos version
• 6b1a0f7 Merge pull request #6181 from snyk/release-candidate
• 505f63f Merge pull request #6179 from snyk/chore/update-release-candidate
• f510f77 fix: changed fixture used for integration test for faster success
• aaf67a8 chore: update release notes
• 9f7a56f chore: add snyk mcp metadata field
• c468e9e chore: update with GAF release branch commit
• 373bf27 chore: automatic integration of language server b98640ff2ec286b8ea3de8ff94dad...
• 18089da fix(logging): pass known CLI parameters to scrub out sensitive data
• Additional commits viewable in compare view

You can trigger a rebase of this PR by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Note Automatic rebases have been disabled on this pull request as it has been open for over 30 days.