| Index | index by Group | index by Distribution | index by Vendor | index by creation date | index by Name | Mirrors | Help | Search |
| Name: jfrog-cli | Distribution: openSUSE Tumbleweed |
| Version: 2.115.0 | Vendor: openSUSE |
| Release: 1.2 | Build date: Thu Jul 16 07:23:11 2026 |
| Group: Unspecified | Build host: reproducible |
| Size: 63015087 | Source RPM: jfrog-cli-2.115.0-1.2.src.rpm |
| Packager: http://bugs.opensuse.org | |
| Url: https://github.com/jfrog/jfrog-cli | |
| Summary: A client that automates access to the JFrog products | |
JFrog CLI is a compact and smart client that provides a simple interface that automates access to Artifactory and Mission Control through their respective REST APIs. By using the JFrog CLI, you can greatly simplify your automation scripts making them more readable and easier to maintain. Several features of the JFrog CLI makes your scripts more efficient and reliable: - Multithreaded upload and download of artifacts make builds run faster - Checksum optimization reduces redundant file transfers - Wildcards and regular expressions give you an easy way to collect all the artifacts you wish to upload or download. - "Dry run" gives you a preview of file transfer operations before you actually run them
Apache-2.0
* Thu Jul 16 2026 Johannes Kastl <opensuse_buildservice@ojkastl.de>
- Update to version 2.115.0 (2.114.0 does not exist):
* New Features
- [build-info-go] add ci env check for buid info duration
capture #397 (@reshmifrog)
- [jfrog-cli] Add OpenAPI spec embed for jf api operation
discovery #3595 (@ehl-jf)
* Bug Fixes
- [build-info-go] RTECO-1401 Fix/Publish Build Info with Build
Duration #395 (@reshmifrog)
- [jfrog-cli] fix build info build duration issue #3575
(@reshmifrog)
- [jfrog-cli-artifactory] Updating oras.land/oras-go/v2 version
to 2.6.2 #507 (@naveenku-jfrog)
* Thu Jul 09 2026 Johannes Kastl <opensuse_buildservice@ojkastl.de>
- Update to version 2.113.0:
* New Features
- [jfrog-cli] Rteco alpine tests #3590 (@naveenku-jfrog)
* Bug Fixes
- [jfrog-cli] RTECO-945 - Fix Go version mismatch in Alpine APK
CI #3592 (@naveenku-jfrog)
- [jfrog-cli-artifactory] RTECO-1560 - Fix agentplugins install
issue #500 (@udaykb2)
- [jfrog-cli-security] XRAY-146567 - Fixed maven proxy issue
[#796] (@gauriy-tech)
* Other Changes
- [jfrog-cli] RTECO-1560 - Skip agentplugins tests #3587
(@udaykb2)
- [jfrog-cli] Hide survey link when invoked by an AI agent
[#3588] (@ehl-jf)
- [jfrog-cli-artifactory] Expend vsc detection #485 (@attiasas)
- [jfrog-cli-artifactory] Expend vsc detection for container
[#486] (@attiasas)
- [jfrog-cli-security] Pass os env variables to SAST server
[#790] (@ilya-k-1)
- [jfrog-cli-security] XRAY-145620 - Report actual module count
in git audit config profile error #793 (@Jordanh1996)
* Wed Jul 01 2026 Johannes Kastl <opensuse_buildservice@ojkastl.de>
- Update to version 2.112.0:
* New Features
- [jfrog-cli-security] XRAY-145721 - Added fallback logic for
Poetry #783 (@Phavya-jfrog)
* Bug Fixes
- [jfrog-cli] Fix ghost frog install to honour default ModePass
tools #3579 (@ehl-jf)
- [jfrog-cli-security] Fix - Gradle dep tree references missing
output files #791 (@attiasas)
* Internal Changes
- [jfrog-cli-security] Update Xray lib plugin default version
to 1.4.0 #788 (@attiasas)
- [jfrog-cli-security] Update dependencies #792 (@attiasas)
* Other Changes
- [jfrog-cli-artifactory] XRAY-139364 - Automatically set VSC
properties from local git on uploaded artifacts #484
(@attiasas)
- [jfrog-cli-security] XRAY-144147 Support Yarn v4 for curation
audit #778 (@gauriy-tech)
* Dependencies
- Bump actions/checkout in the github-actions group across 1
directory (#3564)
- Bump github.com/moby/moby/api in the go group across 1
directory (#3570)
* Sun Jun 28 2026 Johannes Kastl <opensuse_buildservice@ojkastl.de>
- Update to version 2.111.0 (2.110.0 was not released):
* New Features
- [jfrog-cli] Added Post Failure Run support for poetry #3548
(@Phavya-jfrog)
- [jfrog-cli] Add timestamp suffix to UvBuildName for test
isolation #3559 (@agrasth)
- [jfrog-cli] Add timestamp suffix to Nix repos and build name
for test isolation #3562 (@agrasth)
- [jfrog-cli-artifactory] Add AI help coverage check to static
analysis #490 (@ehl-jf)
- [jfrog-cli-security] XRAY-138689 - Add Poetry support for jf
ca #768 (@Phavya-jfrog)
* Bug Fixes
- [jfrog-cli] fix poetry publish command not respecting the
repo flag #3547 (@reshmifrog)
- [jfrog-cli] Fix/latest release for hf breaks cli #3560
(@reshmifrog)
- [jfrog-cli-artifactory] fix poetry publish command not
respecting the repo flag #489 (@reshmifrog)
- [jfrog-cli-core] Fix uncaught error in DownloadDependency
[#1576] (@eranturgeman)
- [jfrog-cli-security] Fix - Close log for Xray plugin #780
(@attiasas)
- [jfrog-cli-security] Fix cocoapods OOM #781 (@eranturgeman)
- [jfrog-cli-security] XRAY-145623 - pip jf ca failure due to
CVS #777 (@Phavya-jfrog)
* Internal Changes
- [jfrog-cli-security] Update dependencies #782 (@attiasas)
* Other Changes
- [jfrog-cli] common as default deployment size for artifactory
[#3557] (@reshmifrog)
- [jfrog-cli] RTECO-1411 Add agentplugins tests #3551
(@udaykb2)
- [jfrog-cli] RTECO-1074 - Remove redundant functions in agent
namespace-1 #3566 (@udaykb2)
- [jfrog-cli] RTECO-1074 - Remove redundant functions in agent
namespace-2 #3567 (@udaykb2)
- [jfrog-cli-artifactory] RTECO-1074 - Remove redundant
functions in agent namespace(1/2) #495 (@udaykb2)
- [jfrog-cli-artifactory] RTECO-1074 - Remove redundant
functions in agent namespace-2 #498 (@udaykb2)
* Thu Jun 18 2026 Johannes Kastl <opensuse_buildservice@ojkastl.de>
- Update to version 2.109.0:
* New Features
- [jfrog-cli] Add AI-agent help text to mcp and uv commands
[#3545] (@ehl-jf)
- [jfrog-cli-artifactory] JGC-492 - Add --format flag for
release-bundle-create, promote, and distribute #488 (@ehl-jf)
* Bug Fixes
- [build-info-go] RTECO-1187 - Updated logic to skip cache
check for empty depedency project #392 (@naveenku-jfrog)
* Other Changes
- [jfrog-cli-core] JGC-501 - Force non-interactive mode when
CLI is invoked by an agent #1573 (@ehl-jf)
* Thu Jun 11 2026 Johannes Kastl <opensuse_buildservice@ojkastl.de>
- Update to version 2.108.0:
* New Features
- [build-info-go] Added pnpm package support to recognise 403
Forbidden output #389 (@Phavya-jfrog)
- [jfrog-cli] Add jf mcp command to configure the remote JFrog
MCP server #3533 (@ehl-jf)
- [jfrog-cli] Add AI context description to commands #3503
(@ehl-jf)
- [jfrog-cli] feat: add server id to login command #3394
(@tim-goto)
- [jfrog-cli] RTECO-1021 - Enhance metrics visibility by
including package manager context #3534 (@fluxxBot)
- [jfrog-cli] Make nix command visible #3539 (@reshmifrog)
- [jfrog-cli] Added Post Failure Run support for pnpm and Yarn
[#3509] (@Phavya-jfrog)
- [jfrog-cli-artifactory] JGC-473 - Add AI-agent help text to
artifactory commands #455 (@ehl-jf)
- [jfrog-cli-artifactory] RTECO-1021 - Enhance metrics
visibility by including package manager context #481
(@fluxxBot)
- [jfrog-cli-artifactory] RTECO-1400 - Add path validation to
prevent traversal attacks in artifact handling #487
(@fluxxBot)
- [jfrog-cli-core] RTECO-1021 - Enhance metrics visibility by
including package manager context #1569 (@fluxxBot)
- [jfrog-cli-security] Support parsing SCA issues without
components #758 (@attiasas)
- [jfrog-cli-security] JGC-473 - Add AI-agent help text to
security commands #760 (@ehl-jf)
- [jfrog-cli-security] Feature/xray 138688 add yarn support for
jf ca #759 (@gauriy-tech)
- [jfrog-cli-security] XRAY-144809 - CA command [Maven]: Add
option to consider plugin deps #771 (@gauriy-tech)
- [jfrog-cli-security] Feature/xray 138688 add pnpm support for
jf ca #769 (@gauriy-tech)
* Bug Fixes
- [build-info-go] RTECO-1287 jf poetry install --only main
captures all dependency #391 (@reshmifrog)
- [jfrog-cli] RTECO 1296 fix repeated 401 errors before
fallback authentication #3537 (@reshmifrog)
- [jfrog-cli] RTECO-1287 jf poetry install --only main captures
all dependency #3530 (@reshmifrog)
- [jfrog-cli-artifactory] Updated logic for extracting
repository key in case of reverse proxy scenario #458
(@naveenku-jfrog)
- [jfrog-cli-core] Revert "Fix reference token privilege
escalation" #1571 (@reshmifrog)
- [jfrog-cli-security] XRAY-140212 - Updated gradle dep tree
jar with the missing deps fix #751 (@gauriy-tech)
- [jfrog-cli-security] fix: disable npm workspaces for native
config reads #762 (@omribz156)
* Other Changes
- [build-info-go] RTECO-1365 Include e2e tests from jfrog cli
to build-info-go #390 (@reshmifrog)
- [jfrog-cli-artifactory] pnpm update error output handling
[#465] (@Phavya-jfrog)
- [jfrog-cli-security] Auto install Cocoapods when Podfile.lock
not exist #723 (@attiasas)
- [jfrog-client-go] Use Windows system certificate store for
CLI TLS transport #1351 (@RemiBou)
* Thu Jun 04 2026 Johannes Kastl <opensuse_buildservice@ojkastl.de>
- Update to version 2.107.0:
* New Features
- [jfrog-cli-artifactory] RTECO-1079 - Implement search for
plugins #474 (@udaykb2)
- [jfrog-cli-artifactory] RTECO-1079 - Add prompt to install &
update for version #475 (@udaykb2)
* Bug Fixes
- [jfrog-cli] RTECO-1352 - Fix jf setup docker login when using
- -url #3517 (@Edenb2131)
- [jfrog-cli-artifactory] Fix - Change GOPROXY #477 (@udaykb2)
- [jfrog-cli-artifactory] RTECO-1352 - Fix jf setup docker
login when using --url #460 (@Edenb2131)
* Internal Changes
- [jfrog-cli-artifactory] RTECO-1079 - Update agents commands
help #478 (@udaykb2)
* Other Changes
- [jfrog-cli] Rteco 1299 jfrog artifactory ecomatrix cli e2e
[#3523] (@naveenku-jfrog)
- [jfrog-cli] Make sure to use cyclonedx-go 0.10.0 #3525
(@attiasas)
- [jfrog-cli] RTECO-1299 - Retry failed jfrog-cli-workflows
runs via rerun-failed-jobs API #3529 (@naveenku-jfrog)
- [jfrog-cli-artifactory] RTECO-1079 - Remove updating plugins
during publish #471 (@udaykb2)
- [jfrog-cli-artifactory] RTECO-1079 - Consistent plugin
identification #473 (@udaykb2)
- [jfrog-cli-artifactory] RTECO-1079 - Make version & slug
consistent #472 (@udaykb2)
- [jfrog-cli-artifactory] RTECO-1079 - Change the semver error
response #479 (@udaykb2)
- [jfrog-cli-artifactory] RTECO-1079 - Use consistent env
naming #480 (@udaykb2)
* Wed Jun 03 2026 Johannes Kastl <opensuse_buildservice@ojkastl.de>
- Update to version 2.106.0:
* New Features
- [build-info-go] Added poetry and yarn package support to
recognize 403 Forbidden output #387 (@Phavya-jfrog)
- [jfrog-cli-artifactory] RTECO-1272 - Implement agent plugins
install command #463 (@udaykb2)
- [jfrog-cli-artifactory] Add delete Subcommand to jf agent
plugins for Removing Plugin Versions from Artifactory #464
(@agrasth)
- [jfrog-cli-artifactory] feat(agent/plugins): add delete
commands (RTECO-1269) #466 (@agrasth)
- [jfrog-cli-artifactory] RTECO-1268 - Implement plugins update
command #468 (@udaykb2)
- [jfrog-cli-artifactory] RTECO-1270 - Add backward
compatability for skills #469 (@udaykb2)
- [jfrog-cli-security] XRAY-141568 - Added graceful error when
jf ca breaks due to cvs issue at RT server side #761
(@gauriy-tech)
- [jfrog-cli-security] Support all attributes in Central
Configs #670 (@attiasas)
* Bug Fixes
- [jfrog-cli-artifactory] Added logic for fat manifest file
[#452] (@naveenku-jfrog)
* Other Changes
- [jfrog-cli-artifactory] Poetry update error output handling
[#462] (@Phavya-jfrog)
- [jfrog-cli-artifactory] RTECO-1270 - move skills under agent
namespace #461 (@udaykb2)
- [jfrog-client-go] XSC - Update params in config profile #1344
(@attiasas)
* Fri May 29 2026 Johannes Kastl <opensuse_buildservice@ojkastl.de>
- Update to version 2.105.0:
* New Features
- [build-info-go] added nix package manager support #378
(@reshmifrog)
- [jfrog-cli] add nix package manager support #3471
(@reshmifrog)
- [jfrog-cli-artifactory] RTECO-1266 - Implement ai plugins
publish command #454 (@udaykb2)
- [jfrog-cli-artifactory] add nix package manager #442
(@reshmifrog)
- [jfrog-cli-core] RTECO-1266 - Add Subcommand to command #1560
(@udaykb2)
- [jfrog-cli-security] XRAY-140488 - Implement graceful dotnet
restore error for all dotnet … #752 (@gauriy-tech)
* Bug Fixes
- [jfrog-cli] RTECO-1368 - Fix metrics collection for agent
detection and interactive context fields #3518 (@fluxxBot)
- [jfrog-cli-artifactory] Fix: Return error when jfrog server
is not configured #459 (@udaykb2)
- [jfrog-cli-core] RTECO-1368 - Fix metrics collection for
agent detection and interactive context fields #1566
(@fluxxBot)
- [jfrog-cli-security] Fix nil dereference issue regarding
Applicability Scan results #755 (@eranturgeman)
- [jfrog-cli-security] Populate project key to
GetConfigProfileByUrl #763 (@eranturgeman)
- [jfrog-cli-security] Adjust rtRepository path when in project
context #764 (@eranturgeman)
* Internal Changes
- [jfrog-cli-security] Update AnalyzerManager default version
to 1.34.1 #754 (@attiasas)
- [jfrog-cli-security] Update dependencies for 1.29.2 #765
(@eranturgeman)
* Other Changes
- [jfrog-cli] Enable JSON error output for commands with HTTP
requests #3493 (@ehl-jf)
- [jfrog-cli] Make jf uv command publicly available #3511
(@agrasth)
- [jfrog-cli-artifactory] RTECO-1266 - Rename ai plugins to
agent plugins #456 (@udaykb2)
- [jfrog-client-go] Expose full HTTP response in case of error
[#1345] (@ehl-jf)
* Fri May 22 2026 Johannes Kastl <opensuse_buildservice@ojkastl.de>
- Update to version 2.104.1 (.0 was not released):
* New Features
- [build-info-go] Enhance Yarn module to support workspace
projects and non-registry de… #379 (@fluxxBot)
- [jfrog-cli] RTECO-1017 - Enrich User-Agent with agent/CI
context and reuse Cursor… #3468 (@fluxxBot)
- [jfrog-cli] RTECO-1035 - Added Support for yarn v4 #3440
(@fluxxBot)
- [jfrog-cli-artifactory] RTECO-1035 - Added Support for yarn
v4 #422 (@fluxxBot)
- [jfrog-cli-core] RTECO-1017 - Detect agent + CI invocation
context, enrich metrics wit… #1555 (@fluxxBot)
- [jfrog-cli-core] RTECO-1035 - Remove blocking for yarn v4
[#1543] (@fluxxBot)
* Bug Fixes
- [build-info-go] Fix for frogbot failure while setting up go
version #384 (@bhanurp)
- [build-info-go] RTECO-1265: fix(dotnet): preserve all per-TFM
package versions in build-info #381 (@Edenb2131)
- [build-info-go] RTECO-1265 - Fixed Nuget bracket based
dependency resolution #385 (@fluxxBot)
- [jfrog-cli] Fix release script: derive next version from
local current version #3498 (@ehl-jf)
- [jfrog-cli] RTECO-1263 - Fixed Content Reader race panic
[#3502] (@fluxxBot)
- [jfrog-client-go] Fix race in ContentReader causing 'send on
closed channel' panic #1347 (@fluxxBot)
* Internal Changes
- [build-info-go] Bump Maven extractor to 2.43.9 and Gradle4
extractor to 4.35.9 #383 (@agrasth)
- [jfrog-cli-core] Bump github.com/go-git/go-git/v5 from 5.19.0
to 5.19.1 #1561 (@dependabot[bot])
* Other Changes
- [jfrog-cli] Remove the how command #3494 (@ehl-jf)
- [jfrog-cli] JGC-490 - Skip Chocolatey publish when version
already exists #3495 (@ehl-jf)
- [jfrog-client-go] CVE-2025-11579 #1289 (@saya-entro)
* Thu Apr 30 2026 Johannes Kastl <opensuse_buildservice@ojkastl.de>
- Update to version 2.103.0:
* New Features
- [build-info-go] RTECO-992 - Added support for uv package
manager #376 (@agrasth)
- [jfrog-cli] RTECO-992 - Added support for uv package manager
[#3436] (@agrasth)
- [jfrog-cli-artifactory] RTECO-992 - Added support for uv
package manager #421 (@agrasth)
- [jfrog-cli-core] feat: add server id to login command #1529
(@tim-goto)
- [jfrog-cli-core] RTECO-992 - Added support for uv package
manager #1542 (@agrasth)
- [jfrog-cli-security] Add update Jfrog dependencies script
[#715] (@attiasas)
- [jfrog-cli-security] add fastci config d90dd03e4c00
(@attiasas)
- [jfrog-cli-security] Add integration tests for UV and Pnpm
[#732] (@attiasas)
- [jfrog-cli-security] Add explicit GITHUB_TOKEN permissions to
CLA workflow #731 (@attiasas)
- [jfrog-cli-security] Support 'Scanned - No Issues' severity
[#722] (@attiasas)
- [jfrog-cli-security] XRAY-138687 - [Curation] Implementing
support for additional flags #721 (@gauriy-tech)
- [jfrog-cli-security] Add root dir to determine paths for sast
changed files #743 (@attiasas)
- [jfrog-client-go] Add Changed files to GitInfoContext #1337
(@attiasas)
- [jfrog-client-go] Add 'Scanned - No Issues' severity #1336
(@attiasas)
* Bug Fixes
- [jfrog-cli] fix: build+pattern downloads against virtual
repos #3449 (@bhanurp)
- [jfrog-cli-security] Add 7z as alternative for unzip #716
(@attiasas)
- [jfrog-cli-security] Remove duplications in CDX format #719
(@attiasas)
- [jfrog-cli-security] JGC-453 - Fix documentation links #712
(@cyrilc-pro)
- [jfrog-cli-security] Pick correct diff baseline when multiple
technologies share a path #724 (@attiasas)
- [jfrog-cli-security] Use Config Profile to determine if we
should run SBOM #742 (@attiasas)
- [jfrog-client-go] fix: build+pattern downloads against
virtual repos #1338 (@bhanurp)
* Internal Changes
- [jfrog-cli-core] Bump dependabot/fetch-metadata from 3.0.0 to
3.1.0 in the github-actions group #1548 (@dependabot[bot])
- [jfrog-cli-security] Update dependencies #717 (@attiasas)
- [jfrog-cli-security] Update Analyzer Manager to v1.31.1 #725
(@attiasas)
* Other Changes
- [jfrog-cli] test: Add E2E coverage for helm push OCI subpaths
and build-info modu… #3455 (@naveenku-jfrog)
- [jfrog-cli-artifactory] Rteco 1013 helm #430
(@naveenku-jfrog)
- [jfrog-cli-security] Updated build-info-go version #714
(@naveenku-jfrog)
- [jfrog-cli-security] Extend skip time for failed tests #720
(@attiasas)
- [jfrog-cli-security] Remove Jfrog pipelines #713 (@attiasas)
- [jfrog-cli-security] remove fastci config e1cc4c44ca82
(@attiasas)
- [jfrog-cli-security] Pass current Xray version to AM #726
(@attiasas)
- [jfrog-cli-security] Warn on missing components parsing issue
[#741] (@attiasas)
- [jfrog-cli-security] Fast sast mode using changed files #739
(@attiasas)
- [jfrog-cli-security] BuildScan - Option to control showing
Violations #740 (@attiasas)
* Tue Apr 21 2026 Johannes Kastl <opensuse_buildservice@ojkastl.de>
- Update to version 2.102.0:
* Bug Fixes
- [jfrog-cli] RTECO-1052 - Fix docker performance #3447
(@fluxxBot)
* Internal Changes
- [jfrog-cli-core] Bump nuget/setup-nuget from 3 to 4 in the
github-actions group #1546 (@dependabot[bot])
* Other Changes
- [jfrog-cli-artifactory] RTECO-1052 - Docker verification
customisable through flags #428 (@fluxxBot)
* Sat Apr 18 2026 Johannes Kastl <opensuse_buildservice@ojkastl.de>
- Update to version 2.101.0:
* New Features
- [jfrog-cli] Add conan support to JFrog CLI #3346 (@basel1322)
- [jfrog-cli-core] Added conan to projects #1522 (@basel1322)
- [jfrog-client-go] add build filter in pattern aql #1329
(@reshmifrog)
* Bug Fixes
- [jfrog-cli-artifactory] fix/build-filter-in-pattern-aql #415
(@reshmifrog)
* Internal Changes
- [jfrog-cli-core] Bump github.com/go-git/go-git/v5 from 5.17.1
to 5.18.0 #1544 (@dependabot[bot])
* Other Changes
- [jfrog-cli] RTECO-1049 - switch between podman and docker
[#3442] (@fluxxBot)
* Fri Apr 17 2026 Johannes Kastl <opensuse_buildservice@ojkastl.de>
- Update to version 2.100.0:
* No changes in: build-info-go, gofrog, jfrog-cli-security,
jfrog-client-go
* New Features
- [jfrog-cli] New Feature: Implement package alias to invoke
jfrog-cli based on package manager #3375 (@bhanurp)
- [jfrog-cli] JGC-448 - Add explicit GITHUB_TOKEN permissions
to CLA workflow #3428 (@RemiBou)
- [jfrog-cli] JGC-470 - Implement an api command #3418
(@ehl-jf)
* Bug Fixes
- [jfrog-cli-artifactory] Fix: Empty Build Info When Using
Maven Plugin Goals #406 (@agrasth)
- [jfrog-cli-artifactory]
fix/reference-token-privilege-escalation #416 (@reshmifrog)
- [jfrog-cli-core] Fix reference token privilege escalation
[#1540] (@reshmifrog)
* Internal Changes
- [jfrog-cli-core] Bump pnpm/action-setup from 5 to 6 in the
github-actions group #1541 (@dependabot[bot])
* Other Changes
- [jfrog-cli-artifactory] set docker test platform url #419
(@reshmifrog)
* Thu Apr 09 2026 Johannes Kastl <opensuse_buildservice@ojkastl.de>
- Update to version 2.99.0:
* No changes in: build-info-go, gofrog, jfrog-cli-security,
jfrog-client-go
* New Features
- [jfrog-cli] Add Ghost Frog Tests workflow #3400 (@bhanurp)
- [jfrog-cli-core] Added metrics for package alias #1527
(@bhanurp)
* Bug Fixes
- [jfrog-cli] Fixed github action reference in tests #3417
(@bhanurp)
- [jfrog-cli-artifactory] fix: omit empty credentials #384
(@tim-goto)
* Thu Apr 02 2026 Johannes Kastl <opensuse_buildservice@ojkastl.de>
- Update to version 2.98.0:
* New Features
- [jfrog-cli] Support pnpm command for jfrog-cli #3390
(@fluxxBot)
- [jfrog-cli-artifactory] Support pnpm command #393 (@fluxxBot)
- [jfrog-cli-artifactory] Feat: Make skills zip produce
deteriministic checksum #408 (@bhanurp)
- [jfrog-cli-artifactory] New Feat: Malicious detection &
deletion #411 (@bhanurp)
- [jfrog-cli-security] Add entitlment snippet #711 (@attiasas)
- [jfrog-cli-security] Malicious Code scan command #704
(@attiasas)
- [jfrog-client-go] New Feat: Detect malicious skills packages
[#1332] (@bhanurp)
* Bug Fixes
- [build-info-go] Addressed multiples # #375 (@naveenku-jfrog)
- [jfrog-cli] JGC-459 - Fix environment in Frogbot workflow
[#3405] (@cyrilc-pro)
- [jfrog-cli] RTECO-977 - Fix docker build skip-login #3404
(@fluxxBot)
- [jfrog-cli] fix pnpm test #3411 (@fluxxBot)
- [jfrog-cli-artifactory] RTECO-976 - fixed docker oom issue
[#410] (@fluxxBot)
- [jfrog-cli-core] JGC-459 - Fix environment in Frogbot
workflow #1534 (@cyrilc-pro)
- [jfrog-cli-security] Fixed concurrent-map-issue #710
(@basel1322)
- [jfrog-client-go] JGC-459 - Fix environment in Frogbot
workflow #1331 (@cyrilc-pro)
- [jfrog-client-go] fix: regex parsing #1321 (@tim-goto)
- [jfrog-client-go] Fix: Don't treat literal dots in directory
names as regex metacharacters #1335 (@agrasth)
* Internal Changes
- [jfrog-cli] Update jfrog client go #3414 (@agrasth)
- [jfrog-cli-artifactory] Bump jfrog-cli-evidence to v0.9.0 and
update evidence create call #409 (@mnsboev)
- [jfrog-cli-core] Bump github.com/buger/jsonparser from 1.1.1
to 1.1.2 #1535 (@dependabot[bot])
- [jfrog-cli-core] Bump the github-actions group across 1
directory with 3 updates #1537 (@dependabot[bot])
- [jfrog-cli-core] Bump github.com/go-git/go-git/v5 from 5.16.5
to 5.17.1 #1538 (@dependabot[bot])
- [jfrog-cli-security] Update Xray lib to 1.3.0 #707
(@attiasas)
* Other Changes
- [jfrog-cli] Updated build-info-go version and huggingface
hidden flag as false #3408 (@naveenku-jfrog)
- [jfrog-cli-artifactory] Improved error message when user
tries to install SKILL blocked by xray #414 (@bhanurp)
* Fri Mar 27 2026 Johannes Kastl <opensuse_buildservice@ojkastl.de>
- Update to version 2.97.0:
* New Features
- [jfrog-cli-artifactory] XRAY-136990 - Added Dependency
Exlcusion Based on Scope #394 (@omerb-jfrog)
- [jfrog-cli-security] Add Force specific tech in static sca
[#655] (@attiasas)
- [jfrog-cli-security] Add validation error if required package
not installed for the AM #604 (@attiasas)
- [jfrog-client-go] Add get evidence version api call #1325
(@mnsboev)
* Bug Fixes
- [jfrog-cli-artifactory] fix conan recipe not in root dir
issue #397 (@reshmifrog)
- [jfrog-cli-artifactory] Added logic for checking release
bundle into release-bundles-v2-jfds #396 (@naveenku-jfrog)
- [jfrog-cli-artifactory] Reverting the changes done in PR396
[#399] (@naveenku-jfrog)
- [jfrog-cli-artifactory] Added logic for adding python script
by embed package #395 (@naveenku-jfrog)
- [jfrog-cli-artifactory] fx helm subdomain issue #400
(@reshmifrog)
- [jfrog-cli-artifactory] Addressed bughunt bugs and
improvements #401 (@naveenku-jfrog)
- [jfrog-cli-security] Fix Secret violations parsing static-sca
[#695] (@attiasas)
- [jfrog-cli-security] Display partial results on parsing error
[#696] (@attiasas)
- [jfrog-cli-security] Fix diff cascade removal bug #697
(@attiasas)
- [jfrog-cli-security] Fix use wrapper mvn #699 (@attiasas)
- [jfrog-cli-security] Fix "permission denied" issue with
gradlew and MavenW #700 (@eranturgeman)
- [jfrog-cli-security] Fix version remediation in CDX mapping
[#698] (@eranturgeman)
- [jfrog-client-go] JA-19680 - Fixed flaky test - Roles should
match regardless of order #1323 (@ranjithkm-jfrog)
- [jfrog-client-go] Addressed bug for updating project key in
release bundle query #1322 (@naveenku-jfrog)
- [jfrog-client-go] Fix xray report api #1327 (@attiasas)
* Internal Changes
- [jfrog-cli] Update dependencies (except evidence) #3403
(@RemiBou)
- [jfrog-cli-security] Update dependencies #703 (@attiasas)
* Other Changes
- [build-info-go] conan-recipe-not-in-root-dir #372
(@reshmifrog)
- [jfrog-cli] respect args passed through cli conan cmds #3378
(@reshmifrog)
- [jfrog-cli] Updated config in CLI e2e Pipeline for nodepool
and integration used #3391 (@neha-mishraa)
- [jfrog-cli] Updated nodepool for CLI e2e Pipeline #3392
(@neha-mishraa)
- [jfrog-cli] Removed project key environment variable from the
pipeline config #3393 (@neha-mishraa)
- [jfrog-cli] Workflow to rewrite the release notes #3398
(@itsmeleela)
- [jfrog-cli] Addressed bugs/improvements in huggingface
bughunts #3395 (@naveenku-jfrog)
- [jfrog-cli] Workflow hardening #3401 (@barakharyati)
- [jfrog-cli-artifactory] use conan upload json format #392
(@reshmifrog)
- [jfrog-cli-artifactory] Skills commands improvements #405
(@bhanurp)
- [jfrog-cli-core] Get deployment view #1533 (@attiasas)
- [jfrog-cli-security] Remove link to platform on audit cmd
[#706] (@attiasas)
- [jfrog-client-go] Change pull_request_target to pull_request
in workflow #1330 (@barakharyati)
* Thu Mar 12 2026 Johannes Kastl <opensuse_buildservice@ojkastl.de>
- Update to version 2.96.0:
* Improvements
- Fixed Critical Violations by UX writing Audit of Jfrog CLI by
@agrasth in #3388
- Fixed Minor Violations by UX writing Audit of Jfrog CLI by
@agrasth in #3385
- Fixed Major Violations by UX writing Audit of Jfrog CLI by
@agrasth in #3386
* Mon Mar 09 2026 Johannes Kastl <opensuse_buildservice@ojkastl.de>
- Update to version 2.95.0:
* Other Changes
- Added logic for updating HF_ENDPOINT and HF_TOKEN from
default or spe… by @naveenku-jfrog in #3379
- Added the huggingface command name by @naveenku-jfrog in
[#3383]
* Wed Mar 04 2026 Johannes Kastl <opensuse_buildservice@ojkastl.de>
- Update to version 2.94.0:
* Improvements
- Support for docker containerd-snapshotter storage by
@fluxxBot in #3374
* Bug Fixes
- fix/conan-project-key-build-dir-issue by @reshmifrog in #3370
* Other Changes
- Updated e2e test cases for hugging-face by @naveenku-jfrog in
[#3372]
* Fri Feb 27 2026 Johannes Kastl <opensuse_buildservice@ojkastl.de>
- Update to version 2.93.0:
* Other Changes
- Bump go version where needed by @BlasttS in #3363
- Test TestArtifactoryClientCert sometimes fails on Windows...
by @BlasttS in #3366
* Thu Feb 19 2026 Johannes Kastl <opensuse_buildservice@ojkastl.de>
- Update to version 2.92.0:
* Improvements
- Support nested path for docker build by @fluxxBot in #3330
- Support npm run native by @fluxxBot in #3359
* Bug Fixes
- Fix: Latest jfrog cli version check failure by @bhanurp in
[#3353]
* Other Changes
- Added e2e tests for new release bundle finalize command by
@jongler in #3340
- Fix GOSEC by @fluxxBot in #3357
- Added native huggingface native commands and e2e and workflow
tests by @naveenku-jfrog in #3341
- Added CLI e2e Pipeline by @neha-mishraa in #3354
* Fri Feb 06 2026 Johannes Kastl <opensuse_buildservice@ojkastl.de>
- Update to version 2.91.0:
* Other Changes
- Added e2e tests for create and update of a draft release
bundle commands (#3334)
* Sun Feb 01 2026 Johannes Kastl <opensuse_buildservice@ojkastl.de>
- Update to version 2.90.0:
* Bug Fixes
- Fix the merge artifact issue by @agrasth in
jfrog/build-info-go#367
* Fri Jan 23 2026 Johannes Kastl <opensuse_buildservice@ojkastl.de>
- Update to version 2.89.0:
* Exciting New Features
- feature: Automatically set CI VCS properties on uploaded
artifacts by @bhanurp in #3309
* Other Changes
- JGC-489 - Fix release by @RemiBou in #3305
- RTDEV-73424 - Set
TestReleaseBundleCreationFromMultipleSourcesUsingSp… by
@rimapol in #3315
* Sun Jan 11 2026 Johannes Kastl <opensuse_buildservice@ojkastl.de>
- Update to version 2.88.0:
* Exciting New Features
- Added capability to support docker pull with image sha by
@fluxxBot in #3273
- support-conan-build info-collection by @reshmifrog in #3291
* Improvements
- Support multi user profile build-info collection by @fluxxBot
in #3296
- conan improvements by @reshmifrog in #3300
* Bug Fixes
- Fix inconsistent RequestedBy Paths for .NET Dependencies by
@bhanurp in #3279
- Unhide conan command by @reshmifrog in #3299
* Other Changes
- JFMIG-13 - Add ability to provide include files pattern to
migrate only a part of repository by @deepakkjfrog in #3266
- Fix/rteco 694 j frog cli command jf rbs versions not showing
results with project by @naveenku-jfrog in #3294
- Supporting Run native behavior for Gradle by @nitinp19 in
[#3282]
- fix for pypi different package having same checksum by
@nitinp19 in #3302
* Sat Dec 13 2025 Johannes Kastl <opensuse_buildservice@ojkastl.de>
- Update to version 2.87.0:
* Exciting New Features
- Introduced support for docker build command by @fluxxBot in
[#3165]
* Improvements
- Poetry native support improvement by @agrasth in #3247
* Bug Fixes
- Fix for 'include' flag with spec file by @agrasth in #3249
- Update Dependencies: Fix Temp Cleanup & Git Handling by
@agrasth in #3272
* Other Changes
- curl-command-parsing-issue by @reshmifrog in #3256
- Add native helm commands support by @naveenku-jfrog in #3235
* Thu Dec 11 2025 Johannes Kastl <opensuse_buildservice@ojkastl.de>
- Update to version 2.86.0:
* Exciting New Features
- add-support-for-native-conan-commands by @reshmifrog in #3236
* Bug Fixes
- Fix docker scan help command by @attiasas in #3191
* Other Changes
- Addressed bug for adding correct http or https based on url
by @naveenku-jfrog in #3246
* Tue Nov 25 2025 Johannes Kastl <opensuse_buildservice@ojkastl.de>
- Update to version 2.85.0:
* Bump version to 2.85.0 (#3239)
* Thu Nov 20 2025 Johannes Kastl <opensuse_buildservice@ojkastl.de>
- Update to version 2.84.0:
* Bug Fixes
- Fix jf rt curl bug with additional flags
* Wed Nov 19 2025 Johannes Kastl <opensuse_buildservice@ojkastl.de>
- Update to version 2.83.0:
* Exciting New Features
- support-direct-download-cmd-bypassing-aql by @reshmifrog in
[#3103]
* Bug Fixes
- Fix poetry publish bug in traditional flow by @agrasth in
[#3208]
- fix-curl-cmd-arg-parsing-issue by @reshmifrog in #3205
* Other Changes
- JGC-426 - Add parameters to select which steps to run in
Jenkins build, Fix chocolatey push by @RemiBou in #3189
- Fix/e2e test case for search with pattern by @naveenku-jfrog
in #3200
- Update-dependency-for-jfrog-cli-artifactory by
@naveenku-jfrog in #3206
- Add Kiro IDE Support to jf ide setup by @agrasth in #3209
- add evidence e2e tests by @osaidwtd in #3201
- update env secrets by @osaidwtd in #3215
- JSEC-14301 - Remove automation for safe to test by @RemiBou
in #3218
- JGC-000 - Bump golang by @RemiBou in #3227
- Set explicit golang by @RemiBou in #3228
* Thu Oct 30 2025 Johannes Kastl <opensuse_buildservice@ojkastl.de>
- Update to version 2.82.0:
* Improvements
- Updated IDE design and added support for vscode persistence
by @agrasth in #3164
* Other Changes
- fix: help command for generating markdown summary by
@sean-perkins in #3157
- JGC-421 - Display link only on help by @RemiBou in #3172
- use jf evd as separate embedded plugin by @RemiBou in #3186
* Fri Oct 17 2025 Johannes Kastl <opensuse_buildservice@ojkastl.de>
- Update to version 2.81.0:
* Exciting New Features
- AppTrust commands by @asafgabai in #3155
* Improvements
- Added Maven native implementation using flexpack by @agrasth
in #3081
* Other Changes
- Added stats command by @naveenku-jfrog in #3118
- Fix survey displayed in autocomplete by @RemiBou in #3145
* Fri Oct 03 2025 Johannes Kastl <opensuse_buildservice@ojkastl.de>
- Update to version 2.80.0:
* Bug Fixes
- add timestamp as props for python pkg by @reshmifrog in #3144
* Mon Sep 29 2025 Johannes Kastl <opensuse_buildservice@ojkastl.de>
- Update to version 2.79.2:
* Bug Fixes
- VCS Params Alignment by @EyalDelarea in #3137
* Other Changes
- Use CI env var for hidding survey by @RemiBou in #3139
* Fri Sep 26 2025 Johannes Kastl <opensuse_buildservice@ojkastl.de>
- Update to version 2.79.1:
* Exciting New Features
- JA-17729 - Add support for disable-token-refresh flag by
@arshjotk in #3132
* Improvements
- Fix npm native workspace by @fluxxBot in #3115
* Bug Fixes
- Fixed build info recording npm workspaces by @fluxxBot in
[#3124]
* Other Changes
- Fine tune tests trigger by @ehl-jf in #3120
- JGC-414 - Remove line breaks in Authorization header for
Gitlab by @cyrilc-pro in #3110
- JGC-405 - Add survey link by @RemiBou in #3122 use env var
JFROG_CLI_HIDE_SURVEY=true to hide it
- Fix darwin binary build by @RemiBou in #3138
* Fri Sep 19 2025 Johannes Kastl <opensuse_buildservice@ojkastl.de>
- Update to version 2.79.0:
* Exciting New Features 🎉
- Flexpack by @agrasth in #3057
- Support for docker login by @fluxxBot in #3077
- Added collect env and collect git task in bp by @fluxxBot in
[#3105]
* Sun Sep 14 2025 Johannes Kastl <opensuse_buildservice@ojkastl.de>
- Update to version 2.78.9:
* Bug Fixes
- Fixed jf pip deps.cache off-by-one error by @fluxxBot in
[#3065]
* Tue Sep 02 2025 Johannes Kastl <opensuse_buildservice@ojkastl.de>
- Update to version 2.78.8:
* Fix github.com/ulikunitz/xz see
https://github.com/ulikunitz/xz/issues/65 (#3073)
* Bump ver from 2.78.7 to 2.78.8 (#3072)
* Thu Aug 28 2025 Johannes Kastl <opensuse_buildservice@ojkastl.de>
- Update to version 2.78.7:
* Bug Fixes
- SARIF - Fill missing invocation attributes if needed by
@attiasas in #545
* Tue Aug 26 2025 Johannes Kastl <opensuse_buildservice@ojkastl.de>
- Update to version 2.78.6:
* Bug Fixes
- Fix Vulnerabilities locations in SCA for SARIF and null
attributes by @attiasas in jfrog/jfrog-cli-security#539
* Thu Aug 21 2025 Johannes Kastl <opensuse_buildservice@ojkastl.de>
- Update to version 2.78.5:
* Bump version from 2.78.4 to 2.78.5 (#3062)
* Bump go version to 1.24.6 (#3061)
* Bump ver from 2.78.3 to 2.78.4 (#3060)
* fixed build search for build names with special chars (#3056)
* Mon Aug 18 2025 Johannes Kastl <opensuse_buildservice@ojkastl.de>
- Update to version 2.78.3:
* Improvements
- Remove empty properties field from build-info by @reshmifrog
in #3046
* Bug Fixes
- Use GitHub token for CLI version checks (avoid anonymous
rate‑limit) by @nirvanin in #3050
* Other Changes
- Add GitHub Actions summary section for the create evidence
command by @mnsboev in #3042
* Fri Aug 01 2025 Johannes Kastl <opensuse_buildservice@ojkastl.de>
- Update to version 2.78.2:
* JPI-396 - add github token (#3038)
* Thu Jul 24 2025 Johannes Kastl <opensuse_buildservice@ojkastl.de>
- Update to version 2.78.1:
* Improvements
- replace sast fingerprint to significant path by @hadarshjfrog
in jfrog/jfrog-cli-security#498
- Add partialFingerprints to result sarif by @solganik in
jfrog/jfrog-cli-security#510
* Bug Fixes
- Fix build failure logic to consider applied policies rules by
@eranturgeman in jfrog/jfrog-cli-security#501
* Other Changes
- IDE setup for vscode and jetbrains by @agrasth in #3027
- Fixed the proper handling of deletionStatus by
@naveenku-jfrog in jfrog/jfrog-client-go#1142
- Add properties for repository via j frog cli by
@naveenku-jfrog in jfrog/jfrog-client-go#1148
- get all permisison targets(fix jfrog/jfrog-client-go#569) by
@legnoh in jfrog/jfrog-client-go#1141
* Thu Jul 24 2025 Johannes Kastl <opensuse_buildservice@ojkastl.de>
- Update to version 2.78.0:
* Exciting New Features
- Add versioning support to worker commands by @ehl-jf in #3018
* Improvements
- Add OIDC context struct by @EyalDelarea in #3014
* Other Changes
- Add Ruby gems support to JFrog CLI by @agrasth in #2992
- Remove scanning of unused resources when creating binaries by
@naveenku-jfrog in #3016
- Remove audit command and add scan command by @naveenku-jfrog
in #3019
- Add properties for repository via the JFrog CLI by
@naveenku-jfrog in #3025
* Dependencies
- Bump go version to 1.24 (#3037)
* Fri Jun 13 2025 Johannes Kastl <opensuse_buildservice@ojkastl.de>
- Update to version 2.77.0:
* Exciting New Features
- Added curation audit for gradle by @basel1322 in
jfrog/jfrog-cli-security#455
- Support new command (source-mcp) by @ilya-k-1 in
jfrog/jfrog-cli-security#448
* Bug Fixes
- Fix for mismatching cpu type for macos arm64 architecture by
@bhanurp in #2993
* Improvements
- Update to --watches flag documentation by @eranturgeman in
jfrog/jfrog-cli-security#461
* Thu May 29 2025 Johannes Kastl <opensuse_buildservice@ojkastl.de>
- Update to version 2.76.1:
* Improvements
- Support for JFrog Advanced Security (JAS) in scan command by
@guyshe-jfrog in jfrog-cli-security#407
- Add support for non-standard package.json locations in npm
tarballs by @agrasth in jfrog-cli-artifactory#78
* Bug Fixes
- Pass Project key to xray api if provided by @attiasas in
jfrog-cli-security#454
- Fixed a failure when trying to read if spec flag is set by
@bhanurp in jfrog-cli-artifactory#77
* Mon May 19 2025 Johannes Kastl <opensuse_buildservice@ojkastl.de>
- Update to version 2.76.0:
* Exciting New Features
- Introduced new lifecycle annotate command by @rimapol in
[#2964]
* Bug Fixes
- Fix bug to use Maven wrapper when DepTreeParams.UseWrapper is
true by @ranma2913 in jfrog/jfrog-cli-security#420
- BuildScan - Fix parse violations if requested to show by
@attiasas in jfrog/jfrog-cli-security#422
* Thu May 08 2025 Johannes Kastl <opensuse_buildservice@ojkastl.de>
- Update to version 2.75.1:
* Improvements
- Update Analyzer Manager to v1.17.0 by @attiasas in
jfrog/jfrog-cli-security#411
* Bug Fixes
- Fix jf eot command output by @EyalDelarea in #2961
- Added no cache flag to gradle dep tree by @eyalk007 in
jfrog/jfrog-cli-security#413
* Fri May 02 2025 Johannes Kastl <opensuse_buildservice@ojkastl.de>
- new package jfrog-cli: client that automates access to the JFrog
products
/usr/bin/jf /usr/share/doc/packages/jfrog-cli /usr/share/doc/packages/jfrog-cli/README.md /usr/share/licenses/jfrog-cli /usr/share/licenses/jfrog-cli/LICENSE
Generated by rpm2html 1.8.1
Fabrice Bellet, Sun Aug 2 02:32:54 2026