Skip to content

chore: bump snyk-ls to 865b318b, gaf to v0.11.0 [IDE-1896] - #7071

Open
nick-y-snyk wants to merge 2 commits into
snyk:mainfrom
nick-y-snyk:chore/bump-snyk-ls-endpoint-regex
Open

chore: bump snyk-ls to 865b318b, gaf to v0.11.0 [IDE-1896]#7071
nick-y-snyk wants to merge 2 commits into
snyk:mainfrom
nick-y-snyk:chore/bump-snyk-ls-endpoint-regex

Conversation

@nick-y-snyk

@nick-y-snyk nick-y-snyk commented Aug 3, 2026

Copy link
Copy Markdown
Contributor

What does this PR do?

Bumps github.com/snyk/snyk-ls to 865b318b (latest main), and github.com/snyk/go-application-framework to v0.11.0 (pulled in transitively — snyk-ls now requires it directly).

snyk-ls#1381 switches the language server's audience-host validation (extractAudHost/audHostFromClaim in auth_service_impl.go) from the superseded CONFIG_KEY_ALLOWED_HOST_REGEXP regex check to GAF's IsValidSnykHost (domain-allowlist based), matching the same migration GAF PR #662 made to modifyTokenUrl.

This also picks up snyk-ls#1395, which corrects the GAF version to v0.11.0: an earlier snyk-ls commit had an accidental bump to a nonexistent GAF v1.0.0 that was reverted upstream before this PR's original merge — this update pulls in that correction instead.

cli itself doesn't call the affected auth-host functions directly, so this is a pure dependency bump — no cli-side code change.

Jira: IDE-1896

Checklist

  • go build ./... clean in both cliv2 and cliv2-private
  • go vet ./... clean in both modules
  • go test ./... passes in cliv2 (all packages)

@nick-y-snyk
nick-y-snyk requested a review from a team as a code owner August 3, 2026 11:27
@CLAassistant

CLAassistant commented Aug 3, 2026

Copy link
Copy Markdown

CLA assistant check
All committers have signed the CLA.

@snyk-io

snyk-io Bot commented Aug 3, 2026

Copy link
Copy Markdown

Snyk checks have passed. No issues have been found so far.

Status Scan Engine Critical High Medium Low Total (0)
Open Source Security 0 0 0 0 0 issues
Licenses 0 0 0 0 0 issues
Code Security 0 0 0 0 0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

@nick-y-snyk

Copy link
Copy Markdown
Contributor Author

Reopening to retrigger checks

@nick-y-snyk nick-y-snyk closed this Aug 3, 2026
@nick-y-snyk nick-y-snyk reopened this Aug 3, 2026
Pulls in snyk-ls PR #1381, which switches audience-host validation to
GAF's IsValidSnykHost (domain-allowlist based) instead of the
superseded regex. Also picks up snyk-ls#1395, which corrects the GAF
version to v0.11.0 after an accidental v1.0.0 bump was reverted
upstream (v1.0.0 never actually existed as a real GAF release).
@nick-y-snyk
nick-y-snyk force-pushed the chore/bump-snyk-ls-endpoint-regex branch from 86dc2d9 to 8827a2a Compare August 4, 2026 09:57
@nick-y-snyk nick-y-snyk changed the title chore: bump snyk-ls to 65f506fd, gaf to v1.0.0 [IDE-1896] chore: bump snyk-ls to 865b318b, gaf to v0.11.0 [IDE-1896] Aug 4, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants