2.102.0

What changed in v2.102.0

Auto-generated from 3 repositories · 2026-04-21
Comparing v2.101.0 → v2.102.0

ℹ️ No changes in: build-info-go, gofrog, jfrog-cli-security, jfrog-client-go

🐛 Bug Fixes

• [jfrog-cli] RTECO-1052 - Fix docker performance #3447 (@fluxxBot)

🔧 Internal Changes

• [jfrog-cli-core] Bump nuget/setup-nuget from 3 to 4 in the github-actions group #1546 (@dependabot[bot])

📦 Other Changes

• [jfrog-cli-artifactory] RTECO-1052 - Docker verification customisable through flags #428 (@fluxxBot)

---

📊 Summary

Repository	Changes
jfrog-cli	1
jfrog-cli-artifactory	1
jfrog-cli-core	1
Total	3

🔗 Module Version Changes

Module	From	To
jfrog-cli-artifactory	v0.8.1-0.20260416104146-471c3f71ce61	v0.8.1-0.20260421101844-c42ed5f491fa
jfrog-cli-core	v2.60.1-0.20260417224747-1bea4a117b59	v2.60.1-0.20260420010255-65b7a8d432af

2.101.0

What changed in v2.101.0

Auto-generated from 4 repositories · 2026-04-18
Comparing v2.100.0 → v2.101.0

ℹ️ No changes in: build-info-go, gofrog, jfrog-cli-security

✨ New Features

• [jfrog-cli] Add conan support to JFrog CLI #3346 (@basel1322)
• [jfrog-cli-core] Added conan to projects #1522 (@basel1322)
• [jfrog-client-go] add build filter in pattern aql #1329 (@reshmifrog)

🐛 Bug Fixes

• [jfrog-cli-artifactory] fix/build-filter-in-pattern-aql #415 (@reshmifrog)

🔧 Internal Changes

• [jfrog-cli-core] Bump github.com/go-git/go-git/v5 from 5.17.1 to 5.18.0 #1544 (@dependabot[bot])

📦 Other Changes

• [jfrog-cli] RTECO-1049 - switch between podman and docker #3442 (@fluxxBot)

---

📊 Summary

Repository	Changes
jfrog-cli	2
jfrog-cli-core	2
jfrog-cli-artifactory	1
jfrog-client-go	1
Total	6

🔗 Module Version Changes

Module	From	To
jfrog-cli-artifactory	v0.8.1-0.20260414085427-0d891fde6d05	v0.8.1-0.20260416104146-471c3f71ce61
jfrog-cli-core	v2.60.1-0.20260414083544-243b4d55328b	v2.60.1-0.20260417224747-1bea4a117b59
jfrog-client-go	v1.55.1-0.20260401130923-f5a15b584a0d	v1.55.1-0.20260416101832-c47c1246283b

v2.100.0

What changed in v2.100.0

Auto-generated from 3 repositories · 2026-04-15
Comparing v2.99.0 → v2.100.0

ℹ️ No changes in: build-info-go, gofrog, jfrog-cli-security, jfrog-client-go

✨ New Features

• [jfrog-cli] New Feature: Implement package alias to invoke jfrog-cli based on package manager #3375 (@bhanurp)
• [jfrog-cli] JGC-448 - Add explicit GITHUB_TOKEN permissions to CLA workflow #3428 (@RemiBou)
• [jfrog-cli] JGC-470 - Implement an api command #3418 (@ehl-jf)

🐛 Bug Fixes

• [jfrog-cli-artifactory] Fix: Empty Build Info When Using Maven Plugin Goals #406 (@agrasth)
• [jfrog-cli-artifactory] fix/reference-token-privilege-escalation #416 (@reshmifrog)
• [jfrog-cli-core] Fix reference token privilege escalation #1540 (@reshmifrog)

🔧 Internal Changes

• [jfrog-cli-core] Bump pnpm/action-setup from 5 to 6 in the github-actions group #1541 (@dependabot[bot])

📦 Other Changes

• [jfrog-cli-artifactory] set docker test platform url #419 (@reshmifrog)

---

📊 Summary

Repository	Changes
jfrog-cli	3
jfrog-cli-artifactory	3
jfrog-cli-core	2
Total	8

🔗 Module Version Changes

Module	From	To
jfrog-cli-artifactory	v0.8.1-0.20260406055206-755b2b3eb84d	v0.8.1-0.20260414085427-0d891fde6d05
jfrog-cli-core	v2.60.1-0.20260402104745-7a0bc2c11d63	v2.60.1-0.20260414083544-243b4d55328b

2.99.0

What changed in v2.99.0

Auto-generated from 3 repositories · 2026-04-08
Comparing v2.98.0 → v2.99.0

ℹ️ No changes in: build-info-go, gofrog, jfrog-cli-security, jfrog-client-go

✨ New Features

• [jfrog-cli] Add Ghost Frog Tests workflow #3400 (@bhanurp)
• [jfrog-cli-core] Added metrics for package alias #1527 (@bhanurp)

🐛 Bug Fixes

• [jfrog-cli] Fixed github action reference in tests #3417 (@bhanurp)
• [jfrog-cli-artifactory] fix: omit empty credentials #384 (@tim-goto)

---

📊 Summary

Repository	Changes
jfrog-cli	2
jfrog-cli-artifactory	1
jfrog-cli-core	1
Total	4

🔗 Module Version Changes

Module	From	To
jfrog-cli-artifactory	v0.8.1-0.20260401103228-4840b9314595	v0.8.1-0.20260406055206-755b2b3eb84d
jfrog-cli-core	v2.60.1-0.20260330172141-89d5ff480628	v2.60.1-0.20260402104745-7a0bc2c11d63

2.98.0

What changed in v2.98.0

Auto-generated from 6 repositories · 2026-04-01
Comparing v2.97.0 → v2.98.0

ℹ️ No changes in: gofrog

✨ New Features

• [jfrog-cli] Support pnpm command for jfrog-cli #3390 (@fluxxBot)
• [jfrog-cli-artifactory] Support pnpm command #393 (@fluxxBot)
• [jfrog-cli-artifactory] Feat: Make skills zip produce deteriministic checksum #408 (@bhanurp)
• [jfrog-cli-artifactory] New Feat: Malicious detection & deletion #411 (@bhanurp)
• [jfrog-cli-security] Add entitlment snippet #711 (@attiasas)
• [jfrog-cli-security] Malicious Code scan command #704 (@attiasas)
• [jfrog-client-go] New Feat: Detect malicious skills packages #1332 (@bhanurp)

🐛 Bug Fixes

• [build-info-go] Addressed multiples # #375 (@naveenku-jfrog)
• [jfrog-cli] JGC-459 - Fix environment in Frogbot workflow #3405 (@cyrilc-pro)
• [jfrog-cli] RTECO-977 - Fix docker build skip-login #3404 (@fluxxBot)
• [jfrog-cli] fix pnpm test #3411 (@fluxxBot)
• [jfrog-cli-artifactory] RTECO-976 - fixed docker oom issue #410 (@fluxxBot)
• [jfrog-cli-core] JGC-459 - Fix environment in Frogbot workflow #1534 (@cyrilc-pro)
• [jfrog-cli-security] Fixed concurrent-map-issue #710 (@basel1322)
• [jfrog-client-go] JGC-459 - Fix environment in Frogbot workflow #1331 (@cyrilc-pro)
• [jfrog-client-go] fix: regex parsing #1321 (@tim-goto)
• [jfrog-client-go] Fix: Don't treat literal dots in directory names as regex metacharacters #1335 (@agrasth)

🔧 Internal Changes

• [jfrog-cli] Update jfrog client go #3414 (@agrasth)
• [jfrog-cli-artifactory] Bump jfrog-cli-evidence to v0.9.0 and update evidence create call #409 (@mnsboev)
• [jfrog-cli-core] Bump github.com/buger/jsonparser from 1.1.1 to 1.1.2 #1535 (@dependabot[bot])
• [jfrog-cli-core] Bump the github-actions group across 1 directory with 3 updates #1537 (@dependabot[bot])
• [jfrog-cli-core] Bump github.com/go-git/go-git/v5 from 5.16.5 to 5.17.1 #1538 (@dependabot[bot])
• [jfrog-cli-security] Update Xray lib to 1.3.0 #707 (@attiasas)

📦 Other Changes

• [jfrog-cli] Updated build-info-go version and huggingface hidden flag as false #3408 (@naveenku-jfrog)
• [jfrog-cli-artifactory] Improved error message when user tries to install SKILL blocked by xray #414 (@bhanurp)

---

📊 Summary

Repository	Changes
jfrog-cli	6
jfrog-cli-artifactory	6
jfrog-cli-core	4
jfrog-cli-security	4
jfrog-client-go	4
build-info-go	1
Total	25

🔗 Module Version Changes

Module	From	To
build-info-go	v1.13.1-0.20260313042712-238e6dca3dce	v1.13.1-0.20260331040230-c3b53d1a24ac
jfrog-cli-artifactory	v0.8.1-0.20260325060310-a7ee867a2090	v0.8.1-0.20260401103228-4840b9314595
jfrog-cli-core	v2.60.1-0.20260324124720-40db37833f61	v2.60.1-0.20260330172141-89d5ff480628
jfrog-cli-security	v1.26.6	v1.27.0
jfrog-client-go	v1.55.1-0.20260325143056-bdd18b12bbca	v1.55.1-0.20260401130923-f5a15b584a0d

v2.97.0

What changed in v2.97.0

Auto-generated from 6 repositories · 2026-03-26
Comparing v2.96.0 → v2.97.0

ℹ️ No changes in: gofrog

✨ New Features

• [jfrog-cli-artifactory] XRAY-136990 - Added Dependency Exlcusion Based on Scope #394 (@omerb-jfrog)
• [jfrog-cli-security] Add Force specific tech in static sca #655 (@attiasas)
• [jfrog-cli-security] Add validation error if required package not installed for the AM #604 (@attiasas)
• [jfrog-client-go] Add get evidence version api call #1325 (@mnsboev)

🐛 Bug Fixes

• [jfrog-cli-artifactory] fix conan recipe not in root dir issue #397 (@reshmifrog)
• [jfrog-cli-artifactory] Added logic for checking release bundle into release-bundles-v2-jfds #396 (@naveenku-jfrog)
• [jfrog-cli-artifactory] Reverting the changes done in PR396 #399 (@naveenku-jfrog)
• [jfrog-cli-artifactory] Added logic for adding python script by embed package #395 (@naveenku-jfrog)
• [jfrog-cli-artifactory] fx helm subdomain issue #400 (@reshmifrog)
• [jfrog-cli-artifactory] Addressed bughunt bugs and improvements #401 (@naveenku-jfrog)
• [jfrog-cli-security] Fix Secret violations parsing static-sca #695 (@attiasas)
• [jfrog-cli-security] Display partial results on parsing error #696 (@attiasas)
• [jfrog-cli-security] Fix diff cascade removal bug #697 (@attiasas)
• [jfrog-cli-security] Fix use wrapper mvn #699 (@attiasas)
• [jfrog-cli-security] Fix "permission denied" issue with gradlew and MavenW #700 (@eranturgeman)
• [jfrog-cli-security] Fix version remediation in CDX mapping #698 (@eranturgeman)
• [jfrog-client-go] JA-19680 - Fixed flaky test - Roles should match regardless of order #1323 (@ranjithkm-jfrog)
• [jfrog-client-go] Addressed bug for updating project key in release bundle query #1322 (@naveenku-jfrog)
• [jfrog-client-go] Fix xray report api #1327 (@attiasas)

🔧 Internal Changes

• [jfrog-cli] Update dependencies (except evidence) #3403 (@RemiBou)
• [jfrog-cli-security] Update dependencies #703 (@attiasas)

📦 Other Changes

• [build-info-go] conan-recipe-not-in-root-dir #372 (@reshmifrog)
• [jfrog-cli] respect args passed through cli conan cmds #3378 (@reshmifrog)
• [jfrog-cli] Updated config in CLI e2e Pipeline for nodepool and integration used #3391 (@neha-mishraa)
• [jfrog-cli] Updated nodepool for CLI e2e Pipeline #3392 (@neha-mishraa)
• [jfrog-cli] Removed project key environment variable from the pipeline config #3393 (@neha-mishraa)
• [jfrog-cli] Workflow to rewrite the release notes #3398 (@itsmeleela)
• [jfrog-cli] Addressed bugs/improvements in huggingface bughunts #3395 (@naveenku-jfrog)
• [jfrog-cli] Workflow hardening #3401 (@barakharyati)
• [jfrog-cli-artifactory] use conan upload json format #392 (@reshmifrog)
• [jfrog-cli-artifactory] Skills commands improvements #405 (@bhanurp)
• [jfrog-cli-core] Get deployment view #1533 (@attiasas)
• [jfrog-cli-security] Remove link to platform on audit cmd #706 (@attiasas)
• [jfrog-client-go] Change pull_request_target to pull_request in workflow #1330 (@barakharyati)

---

📊 Summary

Repository	Changes
jfrog-cli-security	10
jfrog-cli-artifactory	9
jfrog-cli	8
jfrog-client-go	5
build-info-go	1
jfrog-cli-core	1
Total	34

🔗 Module Version Changes

Module	From	To
build-info-go	v1.13.1-0.20260216093441-40a4dc563294	v1.13.1-0.20260313042712-238e6dca3dce
jfrog-cli-artifactory	v0.8.1-0.20260310063831-ad6064f2f373	v0.8.1-0.20260325060310-a7ee867a2090
jfrog-cli-core	v2.60.1-0.20260225195817-bc599cec3973	v2.60.1-0.20260324124720-40db37833f61
jfrog-cli-security	v1.26.4	v1.26.6
jfrog-client-go	v1.55.1-0.20260310073256-b6a77f9c75e5	v1.55.1-0.20260325143056-bdd18b12bbca

2.96.0

What changed in v2.96.0

Auto-generated from 4 repositories · 2026-03-20
Comparing v2.95.0 → v2.96.0

ℹ️ No changes in: build-info-go, gofrog, jfrog-cli-core

✨ New Features

• [jfrog-cli-artifactory] Added env var to switch --quiet failure during install command #389 (@bhanurp)
• [jfrog-client-go] EnableSnippetDetection Field In Config Profile #1320 (@orto17)

🐛 Bug Fixes

• [jfrog-cli] Fixed Critical Violations by UX writing Audit of Jfrog CLI #3388 (@agrasth)
• [jfrog-cli] Fixed Minor Violations by UX writing Audit of Jfrog CLI #3385 (@agrasth)
• [jfrog-cli] Fixed Major Violations by UX writing Audit of Jfrog CLI #3386 (@agrasth)
• [jfrog-cli-artifactory] RTECO-839 - Fix nil pointer panic in container commands when CLI config is missing #386 (@agrasth)
• [jfrog-cli-artifactory] Fix/conan upload duplicated path in build properties #390 (@reshmifrog)

🔧 Internal Changes

• [jfrog-cli-security] Update Xray lib to 1.0.4 version #692 (@attiasas)
• [jfrog-cli-security] Update Dependencies #693 (@attiasas)

📦 Other Changes

• [jfrog-cli-security] Getting snippet-detection from centrelized config #691 (@orto17)
• [jfrog-client-go] Switch from AQL to a dedicated API for build download #1318 (@agrasth)

---

📊 Summary

Repository	Changes
jfrog-cli	3
jfrog-cli-artifactory	3
jfrog-cli-security	3
jfrog-client-go	2
Total	11

🔗 Module Version Changes

Module	From	To
jfrog-cli-artifactory	v0.8.1-0.20260306094346-2089d7332e94	v0.8.1-0.20260310063831-ad6064f2f373
jfrog-cli-security	v1.26.3	v1.26.4
jfrog-client-go	v1.55.1-0.20260305132144-f99feaed3f18	v1.55.1-0.20260310073256-b6a77f9c75e5

2.95.0

What's Changed

Other Changes 📚

• Added logic for updating HF_ENDPOINT and HF_TOKEN from default or spe… by @naveenku-jfrog in #3379
• Added the huggingface command name by @naveenku-jfrog in #3383

Full Changelog: v2.94.0...v2.95.0

2.94.0

What's Changed

Improvements 🌱

• Support for docker containerd-snapshotter storage (Docker-29 support) by @fluxxBot in #3374

Bug Fixes 🛠

• fix/conan-project-key-build-dir-issue by @reshmifrog in #3370

Full Changelog: v2.93.0...v2.94.0

2.93.0

What's Changed

Other Changes 📚

• Bump go version where needed by @BlasttS in #3363
• Test TestArtifactoryClientCert sometimes fails on Windows... by @BlasttS in #3366

Full Changelog: v2.92.0...v2.93.0