v2.26.0

What's Changed

• feat: update vscode extension dependencies [IDE-1460] by @acke in #663
• fix: send IDE trusted folders to MCP server by @ShawkyZ in #664
• fix: set cursor MCP env vars by @ShawkyZ in #665
• chore: AG-4 create new rules for SAST only by @sathvi-k in #666
• feat: analytics for security at inception by @ShawkyZ in #668
• feat: AG-17 create security level picker by @sathvi-k in #669
• fix: add memento for sat modal by @sathvi-k in #673

New Contributors

• @sathvi-k made their first contribution in #666

Full Changelog: v2.25.0...v2.26.0

v2.25.0

What's Changed

• feat: publish to openvsx by @ShawkyZ in #660
• chore(ci): correct docs sync path [IDA-563] by @rrama in #659
• chore: update snyk_rules trigger by @ShawkyZ in #661
• feat: enable OSS quick fix code actions by default [IDE-1445] by @bastiandoetsch in #662

Full Changelog: v2.24.0...v2.25.0

v2.24.0

What's Changed

• fix: push tags correctly during release, find mcp endpoint config by @bastiandoetsch in #647
• chore: update codeowners [IDE-1357] by @prodsec-github-automation in #651
• chore: pass mocha args for test:integration by @rrama in #646
• fix: display scan errors better [IDE-1105] by @rrama in #640
• feat: generate rules and mcp server config by @ShawkyZ in #652
• chore: upload to s3 by @ShawkyZ in #653
• fix: update global rule delimiters and move security at inception set… by @ShawkyZ in #654
• chore: add security.md [PRODSEC-5886] by @cvaidas in #655
• feat: security at inception for AI IDEs by @ShawkyZ in #656
• fix: setting mcp env var by @ShawkyZ in #657
• chore: bump node version to 20 for release pipeline by @andrewrobinsonhodges-snyk in #658

New Contributors

• @prodsec-github-automation made their first contribution in #651

Full Changelog: v2.23.1...v2.24.0

v2.23.1

What's Changed

• fix: use request-light instead of axios for CLI download [IDE-1236] by @bastiandoetsch in #645
• chore: automate release notes generation [IDE-1043] by @bastiandoetsch in #644

Full Changelog: v2.23.0...v2.23.1

v2.23.0

• Support early access of PAT authentication
• Removed Snyk Code Quality feature. All related settings, configurations, and UI elements have been removed.
• Removed scanning for vulnerabilities in JavaScript libraries referenced via CDN in HTML files.
• Removed inline display of vulnerability counts for imports/requires in JavaScript/TypeScript files.
• Renamed DeepCode AI Fix to Snyk Agent Fix
• Fixed certificate handling when using custom certificates (NODE_EXTRA_CA_CERTS) in insecure mode to prevent hostname mismatch errors

v2.22.0

What's Changed

• fix: update custom endpoint description [IDE-1057] by @acke in #593
• fix: homogenize messages across products [IDE-936] by @bastiandoetsch in #594
• fix: display error message, if we cannot parse the prompt, correct command description by @bastiandoetsch in #598
• chore: deactivate some messages in gemini by @bastiandoetsch in #604
• fix: Unsquish the loading spinner [IDE-1101] by @rrama in #603
• fix: Change folder config storage from persisted to in-memory [IDE-668] by @bastiandoetsch in #600
• docs: synchronizing README from snyk/user-docs by @github-actions in #602
• fix: remove mcp notification by @ShawkyZ in #601
• fix: event origin check by @DariusZdroba in #606
• fix: preserve default CAs and append custom certs to Axios CA options [IDE-1098] by @ShawkyZ in #596
• chore: bump LS protocol version by @andrewrobinsonhodges-snyk in #609
• fix: ensure didChangeConfiguration sends correct folderConfig by @ShawkyZ in #610
• feat: add scan source to workspace scan command by @bastiandoetsch in #607
• fix: scan source by @ShawkyZ in #611
• chore: fix/ignore lint errors [IDE-1102] by @rrama in #605
• feat: handle IAW creation form [IDE-1075] by @rrama in #616
• fix: move filtering ignored issues to the LS [IDE-899] by @rrama in #590

Full Changelog: v2.21.1...v2.22.0

v2.21.1

• Gemini Tool fixes
• Ensure default CAs are used when using proxy
• Add scan source to workspace command

v2.21.0

What's Changed

• chore: bump ls protocol version to 18 by @ShawkyZ in #571
• feat: added summary panel by @acke in #573
• fix: replace ideScript by @ShawkyZ in #574
• chore: add static summary html and resource checks ready for future i… by @andrewrobinsonhodges-snyk in #576
• feat: add support for PATs, allow to select reference directory for delta scans [IDE-846] by @bastiandoetsch in #577
• chore: migrate AI Fix JS logic from IDEs to LS [IDE-655] by @DariusZdroba in #575
• fix: tree items order by @ShawkyZ in #581
• Fix: Change text for help and feedback to not refer to FAQs by @fsargent in #579
• chore: stop using deprecated actions/cache version [IDE-1016] by @rrama in #584
• feat: snyk uri handler [IDE-955] [IDE-975] by @ShawkyZ in #580
• feat: new icons @bastiandoetsch in #585
• fix: show OSS issues for the snyk URI by @rrama in #586
• fix: decode document uri before parsing by @ShawkyZ in #588
• chore: update default scan summary html to match language server by @andrewrobinsonhodges-snyk in #587
• fix: better layout, new icons by @bastiandoetsch in #591

New Contributors

• @andrewrobinsonhodges-snyk made their first contribution in #576
• @fsargent made their first contribution in #579
• @rrama made their first contribution in #584

Full Changelog: v2.20.0...v2.21.0

v2.20.0

• reduce hover verbosity to only title and description
• If $/snyk.hasAuthenticated transmits an API URL, this is saved in the settings.
• Added CLI release channel.
• Added option to change base URL to download CLI.
• Run Snyk language Server from the CLI extension.
• Change default CLI download path to be in extension directory.
• Delete sentry reporting.
• send analytics event "plugin installed" the first time the extension is started

v2.19.2

• Update download endpoint to downloads.snyk.io.
• Send correct FixId to AI Fix endpoint.
• Hide AI Fix div if no fixes found.