Skip to content

Releases: jfrog/jfrog-cli

v2.107.0

03 Jun 13:42
4287416

Choose a tag to compare

What changed in v2.107.0

Auto-generated from 2 repositories · 2026-06-03
Comparing v2.106.0v2.107.0

ℹ️ No changes in: build-info-go, gofrog, jfrog-cli-core, jfrog-cli-security, jfrog-client-go

✨ New Features

  • [jfrog-cli-artifactory] RTECO-1079 - Implement search for plugins #474 (@udaykb2)
  • [jfrog-cli-artifactory] RTECO-1079 - Add prompt to install & update for version #475 (@udaykb2)

🐛 Bug Fixes

  • [jfrog-cli] RTECO-1352 - Fix jf setup docker login when using --url #3517 (@Edenb2131)
  • [jfrog-cli-artifactory] Fix - Change GOPROXY #477 (@udaykb2)
  • [jfrog-cli-artifactory] RTECO-1352 - Fix jf setup docker login when using --url #460 (@Edenb2131)

🔧 Internal Changes

  • [jfrog-cli-artifactory] RTECO-1079 - Update agents commands help #478 (@udaykb2)

📦 Other Changes

  • [jfrog-cli] Rteco 1299 jfrog artifactory ecomatrix cli e2e #3523 (@naveenku-jfrog)
  • [jfrog-cli] Make sure to use cyclonedx-go 0.10.0 #3525 (@attiasas)
  • [jfrog-cli] RTECO-1299 - Retry failed jfrog-cli-workflows runs via rerun-failed-jobs API #3529 (@naveenku-jfrog)
  • [jfrog-cli-artifactory] RTECO-1079 - Remove updating plugins during publish #471 (@udaykb2)
  • [jfrog-cli-artifactory] RTECO-1079 - Consistent plugin identification #473 (@udaykb2)
  • [jfrog-cli-artifactory] RTECO-1079 - Make version & slug consistent #472 (@udaykb2)
  • [jfrog-cli-artifactory] RTECO-1079 - Change the semver error response #479 (@udaykb2)
  • [jfrog-cli-artifactory] RTECO-1079 - Use consistent env naming #480 (@udaykb2)

📊 Summary

Repository Changes
jfrog-cli-artifactory 10
jfrog-cli 4
Total 14

🔗 Module Version Changes

Module From To
jfrog-cli-artifactory v0.8.1-0.20260601110159-16e27949b870 v0.8.1-0.20260603105750-3886c0f01286

2.106.0

02 Jun 12:04
74fc601

Choose a tag to compare

What changed in v2.106.0

Auto-generated from 6 repositories · 2026-06-02
Comparing v2.105.0v2.106.0

ℹ️ No changes in: gofrog

✨ New Features

  • [build-info-go] Added poetry and yarn package support to recognize 403 Forbidden output #387 (@Phavya-jfrog)
  • [jfrog-cli-artifactory] RTECO-1272 - Implement agent plugins install command #463 (@udaykb2)
  • [jfrog-cli-artifactory] Add delete Subcommand to jf agent plugins for Removing Plugin Versions from Artifactory #464 (@agrasth)
  • [jfrog-cli-artifactory] feat(agent/plugins): add delete commands (RTECO-1269) #466 (@agrasth)
  • [jfrog-cli-artifactory] RTECO-1268 - Implement plugins update command #468 (@udaykb2)
  • [jfrog-cli-artifactory] RTECO-1270 - Add backward compatability for skills #469 (@udaykb2)
  • [jfrog-cli-security] XRAY-141568 - Added graceful error when jf ca breaks due to cvs issue at RT server side #761 (@gauriy-tech)
  • [jfrog-cli-security] Support all attributes in Central Configs #670 (@attiasas)

🐛 Bug Fixes

📦 Other Changes

  • [jfrog-cli-artifactory] Poetry update error output handling #462 (@Phavya-jfrog)
  • [jfrog-cli-artifactory] RTECO-1270 - move skills under agent namespace #461 (@udaykb2)
  • [jfrog-client-go] XSC - Update params in config profile #1344 (@attiasas)

📊 Summary

Repository Changes
jfrog-cli-artifactory 8
jfrog-cli-security 2
build-info-go 1
jfrog-client-go 1
Total 12

🔗 Module Version Changes

Module From To
build-info-go v1.13.1-0.20260526201157-3dd942bd9e1f v1.13.1-0.20260528065004-80409c046540
jfrog-cli-artifactory v0.8.1-0.20260527043943-fdf755c4f4c2 v0.8.1-0.20260601110159-16e27949b870
jfrog-cli-core v2.60.1-0.20260528061115-b41c87af0194 v2.60.1-0.20260601130310-8d52a530da18
jfrog-cli-security v1.29.2 v1.29.3
jfrog-client-go v1.55.1-0.20260527095031-a0b759bcd723 v1.55.1-0.20260528115006-6ca9682a3255

2.105.0

28 May 09:24
5cfd613

Choose a tag to compare

What changed in v2.105.0

Auto-generated from 6 repositories · 2026-05-28
Comparing v2.104.1v2.105.0

ℹ️ No changes in: gofrog

✨ New Features

  • [build-info-go] added nix package manager support #378 (@reshmifrog)
  • [jfrog-cli] add nix package manager support #3471 (@reshmifrog)
  • [jfrog-cli-artifactory] RTECO-1266 - Implement ai plugins publish command #454 (@udaykb2)
  • [jfrog-cli-artifactory] add nix package manager #442 (@reshmifrog)
  • [jfrog-cli-core] RTECO-1266 - Add Subcommand to command #1560 (@udaykb2)
  • [jfrog-cli-security] XRAY-140488 - Implement graceful dotnet restore error for all dotnet … #752 (@gauriy-tech)

🐛 Bug Fixes

  • [jfrog-cli] RTECO-1368 - Fix metrics collection for agent detection and interactive context fields #3518 (@fluxxBot)
  • [jfrog-cli-artifactory] Fix: Return error when jfrog server is not configured #459 (@udaykb2)
  • [jfrog-cli-core] RTECO-1368 - Fix metrics collection for agent detection and interactive context fields #1566 (@fluxxBot)
  • [jfrog-cli-security] Fix nil dereference issue regarding Applicability Scan results #755 (@eranturgeman)
  • [jfrog-cli-security] Populate project key to GetConfigProfileByUrl #763 (@eranturgeman)
  • [jfrog-cli-security] Adjust rtRepository path when in project context #764 (@eranturgeman)

🔧 Internal Changes

  • [jfrog-cli-security] Update AnalyzerManager default version to 1.34.1 #754 (@attiasas)
  • [jfrog-cli-security] Update dependencies for 1.29.2 #765 (@eranturgeman)

📦 Other Changes

  • [jfrog-cli] Enable JSON error output for commands with HTTP requests #3493 (@ehl-jf)
  • [jfrog-cli] Make jf uv command publicly available #3511 (@agrasth)
  • [jfrog-cli-artifactory] RTECO-1266 - Rename ai plugins to agent plugins #456 (@udaykb2)
  • [jfrog-client-go] Expose full HTTP response in case of error #1345 (@ehl-jf)

📊 Summary

Repository Changes
jfrog-cli-security 6
jfrog-cli 4
jfrog-cli-artifactory 4
jfrog-cli-core 2
build-info-go 1
jfrog-client-go 1
Total 18

🔗 Module Version Changes

Module From To
build-info-go v1.13.1-0.20260521104402-1e35b9b5b0c6 v1.13.1-0.20260526201157-3dd942bd9e1f
jfrog-cli-artifactory v0.8.1-0.20260520131142-ef80a14dd499 v0.8.1-0.20260527043943-fdf755c4f4c2
jfrog-cli-core v2.60.1-0.20260520130103-75be6a23c54b v2.60.1-0.20260528061115-b41c87af0194
jfrog-cli-security v1.29.0 v1.29.2
jfrog-client-go v1.55.1-0.20260521115926-32f082854b39 v1.55.1-0.20260527095031-a0b759bcd723

v2.104.1

22 May 06:26
94b7f93

Choose a tag to compare

What changed in v2.104.1

Auto-generated from 6 repositories · 2026-05-22
Comparing v2.103.0v2.104.1

ℹ️ No changes in: gofrog

✨ New Features

  • [build-info-go] Enhance Yarn module to support workspace projects and non-registry de… #379 (@fluxxBot)
  • [jfrog-cli] Add common --format flag support #3454 (@ehl-jf)
  • [jfrog-cli] Add --format flag support to rt commands #3456 (@ehl-jf)
  • [jfrog-cli] Add usage report for jf api #3479 (@ehl-jf)
  • [jfrog-cli] RTECO-1017 - Enrich User-Agent with agent/CI context and reuse Cursor… #3468 (@fluxxBot)
  • [jfrog-cli] RTECO-1035 - Added Support for yarn v4 #3440 (@fluxxBot)
  • [jfrog-cli-artifactory] Add UV package manager setup support #437 (@sverdlov93)
  • [jfrog-cli-artifactory] RTECO-1015 - Implement jf skills list command #432 (@udaykb2)
  • [jfrog-cli-artifactory] RTECO-1016 - Implement skills update command #434 (@udaykb2)
  • [jfrog-cli-artifactory] RTECO-1007 - Collect build-info on jf skills publish #441 (@udaykb2)
  • [jfrog-cli-artifactory] Add --format flag support to artifactory commands #435 (@ehl-jf)
  • [jfrog-cli-artifactory] RTECO-1035 - Added Support for yarn v4 #422 (@fluxxBot)
  • [jfrog-cli-core] Add UV package manager support #1549 (@sverdlov93)
  • [jfrog-cli-core] Add common --format flag support #1547 (@ehl-jf)
  • [jfrog-cli-core] RTECO-1017 - Detect agent + CI invocation context, enrich metrics wit… #1555 (@fluxxBot)
  • [jfrog-cli-security] Add cache and parallel run to Git Count Contributors #701 (@attiasas)
  • [jfrog-client-go] Add SAST Fast Diff Mode option to configuration profile #1342 (@attiasas)
  • [jfrog-client-go] RTECO-1015 - Implement ListSkills method to fetch skills #1341 (@udaykb2)

🐛 Bug Fixes

  • [build-info-go] RTECO-1265: fix(dotnet): preserve all per-TFM package versions in build-info #381 (@Edenb2131)
  • [build-info-go] RTECO-1265 - Fixed Nuget bracket based dependency resolution #385 (@fluxxBot)
  • [jfrog-cli] RTECO-992 - Fix uv build command build-info and update jfrog-cli-artifactory dependency #3485 (@agrasth)
  • [jfrog-cli] RTECO-1263 - Fixed Content Reader race panic #3502 (@fluxxBot)
  • [jfrog-cli-artifactory] Fix duplicate dependency entries in build-info for jf uv build and publish #438 (@agrasth)
  • [jfrog-cli-artifactory] RTECO-992 - Restore build-info for jf uv build, clear artifacts only #449 (@agrasth)
  • [jfrog-cli-core] JGC-471 - Fix npm output format parsing #1551 (@ehl-jf)
  • [jfrog-cli-core] Fix #delayed multiarch image list.manifest files are not getting migr… #1552 (@amithins)
  • [jfrog-client-go] Fix race in ContentReader causing 'send on closed channel' panic #1347 (@fluxxBot)

🔧 Internal Changes

  • [build-info-go] Bump Maven extractor to 2.43.9 and Gradle4 extractor to 4.35.9 #383 (@agrasth)
  • [jfrog-cli-artifactory] RTECO-1048 - Improve skills install command #446 (@udaykb2)
  • [jfrog-cli-artifactory] RTECO-1011 - Improve skill commands #448 (@udaykb2)
  • [jfrog-cli-security] Update AnalyzerManager version to 1.33.0 #748 (@attiasas)

📦 Other Changes


📊 Summary

Repository Changes
jfrog-cli-artifactory 11
jfrog-cli 9
jfrog-cli-core 5
build-info-go 4
jfrog-client-go 4
jfrog-cli-security 2
Total 35

🔗 Module Version Changes

Module From To
build-info-go v1.13.1-0.20260429070557-93b98034d295 v1.13.1-0.20260521104402-1e35b9b5b0c6
jfrog-cli-artifactory v0.8.1-0.20260429074430-a5871f2898b5 v0.8.1-0.20260520131142-ef80a14dd499
jfrog-cli-core v2.60.1-0.20260429073430-5723b4f21705 v2.60.1-0.20260520130103-75be6a23c54b
jfrog-cli-security v1.28.0 v1.29.0
jfrog-client-go v1.55.1-0.20260428070955-750b933dc5c7 v1.55.1-0.20260521115926-32f082854b39

v2.103.0

29 Apr 13:38
f1643f0

Choose a tag to compare

What changed in v2.103.0

Auto-generated from 6 repositories · 2026-04-29
Comparing v2.102.0v2.103.0

ℹ️ No changes in: gofrog

✨ New Features

  • [build-info-go] Add support for uv package manager #376 (@agrasth)
  • [jfrog-cli] Add support for uv package manager #3436 (@agrasth)
  • [jfrog-cli-artifactory] Add support for uv package manager #421 (@agrasth)
  • [jfrog-cli-core] Add server id to login command #1529 (@tim-goto)
  • [jfrog-cli-core] Add support for uv package manager #1542 (@agrasth)
  • [jfrog-cli-security] Add update Jfrog dependencies script #715 (@attiasas)
  • [jfrog-cli-security] Add fastci config d90dd03e4c00 (@attiasas)
  • [jfrog-cli-security] Add integration tests for UV and Pnpm #732 (@attiasas)
  • [jfrog-cli-security] Add explicit GITHUB_TOKEN permissions to CLA workflow #731 (@attiasas)
  • [jfrog-cli-security] Support 'Scanned - No Issues' severity #722 (@attiasas)
  • [jfrog-cli-security] Add support for additional flags #721 (@gauriy-tech)
  • [jfrog-cli-security] Add root dir to determine paths for sast changed files #743 (@attiasas)
  • [jfrog-client-go] Add Changed files to GitInfoContext #1337 (@attiasas)
  • [jfrog-client-go] Add 'Scanned - No Issues' severity #1336 (@attiasas)

🐛 Bug Fixes

  • [jfrog-cli] fix: build+pattern downloads against virtual repos #3449 (@bhanurp)
  • [jfrog-cli-security] Add 7z as alternative for unzip #716 (@attiasas)
  • [jfrog-cli-security] Remove duplications in CDX format #719 (@attiasas)
  • [jfrog-cli-security] Fix documentation links #712 (@cyrilc-pro)
  • [jfrog-cli-security] Pick correct diff baseline when multiple technologies share a path #724 (@attiasas)
  • [jfrog-cli-security] Use Config Profile to determine if we should run SBOM #742 (@attiasas)
  • [jfrog-client-go] Fix build+pattern downloads against virtual repos #1338 (@bhanurp)

🔧 Internal Changes

  • [jfrog-cli-core] Bump dependabot/fetch-metadata from 3.0.0 to 3.1.0 in the github-actions group #1548 (@dependabot[bot])
  • [jfrog-cli-security] Update dependencies #717 (@attiasas)
  • [jfrog-cli-security] Update Analyzer Manager to v1.31.1 #725 (@attiasas)

📦 Other Changes


📊 Summary

Repository Changes
jfrog-cli-security 22
jfrog-cli 3
jfrog-cli-core 3
jfrog-client-go 3
jfrog-cli-artifactory 2
build-info-go 1
Total 34

🔗 Module Version Changes

Module From To
build-info-go v1.13.1-0.20260331040230-c3b53d1a24ac v1.13.1-0.20260429070557-93b98034d295
jfrog-cli-artifactory v0.8.1-0.20260421101844-c42ed5f491fa v0.8.1-0.20260429074430-a5871f2898b5
jfrog-cli-core v2.60.1-0.20260420010255-65b7a8d432af v2.60.1-0.20260429073430-5723b4f21705
jfrog-cli-security v1.27.0 v1.28.0
jfrog-client-go v1.55.1-0.20260416101832-c47c1246283b v1.55.1-0.20260428070955-750b933dc5c7

2.102.0

21 Apr 12:33
3e8f371

Choose a tag to compare

What changed in v2.102.0

Auto-generated from 3 repositories · 2026-04-21
Comparing v2.101.0v2.102.0

ℹ️ No changes in: build-info-go, gofrog, jfrog-cli-security, jfrog-client-go

🐛 Bug Fixes

🔧 Internal Changes

  • [jfrog-cli-core] Bump nuget/setup-nuget from 3 to 4 in the github-actions group #1546 (@dependabot[bot])

📦 Other Changes

  • [jfrog-cli-artifactory] RTECO-1052 - Docker verification customisable through flags #428 (@fluxxBot)

📊 Summary

Repository Changes
jfrog-cli 1
jfrog-cli-artifactory 1
jfrog-cli-core 1
Total 3

🔗 Module Version Changes

Module From To
jfrog-cli-artifactory v0.8.1-0.20260416104146-471c3f71ce61 v0.8.1-0.20260421101844-c42ed5f491fa
jfrog-cli-core v2.60.1-0.20260417224747-1bea4a117b59 v2.60.1-0.20260420010255-65b7a8d432af

2.101.0

18 Apr 12:28
e63b478

Choose a tag to compare

What changed in v2.101.0

Auto-generated from 4 repositories · 2026-04-18
Comparing v2.100.0v2.101.0

ℹ️ No changes in: build-info-go, gofrog, jfrog-cli-security

✨ New Features

🐛 Bug Fixes

  • [jfrog-cli-artifactory] fix/build-filter-in-pattern-aql #415 (@reshmifrog)

🔧 Internal Changes

  • [jfrog-cli-core] Bump github.com/go-git/go-git/v5 from 5.17.1 to 5.18.0 #1544 (@dependabot[bot])

📦 Other Changes

  • [jfrog-cli] RTECO-1049 - switch between podman and docker #3442 (@fluxxBot)

📊 Summary

Repository Changes
jfrog-cli 2
jfrog-cli-core 2
jfrog-cli-artifactory 1
jfrog-client-go 1
Total 6

🔗 Module Version Changes

Module From To
jfrog-cli-artifactory v0.8.1-0.20260414085427-0d891fde6d05 v0.8.1-0.20260416104146-471c3f71ce61
jfrog-cli-core v2.60.1-0.20260414083544-243b4d55328b v2.60.1-0.20260417224747-1bea4a117b59
jfrog-client-go v1.55.1-0.20260401130923-f5a15b584a0d v1.55.1-0.20260416101832-c47c1246283b

v2.100.0

15 Apr 20:03
7fdbd56

Choose a tag to compare

What changed in v2.100.0

Auto-generated from 3 repositories · 2026-04-15
Comparing v2.99.0v2.100.0

ℹ️ No changes in: build-info-go, gofrog, jfrog-cli-security, jfrog-client-go

✨ New Features

  • [jfrog-cli] New Feature: Implement package alias to invoke jfrog-cli based on package manager #3375 (@bhanurp)
  • [jfrog-cli] JGC-448 - Add explicit GITHUB_TOKEN permissions to CLA workflow #3428 (@RemiBou)
  • [jfrog-cli] JGC-470 - Implement an api command #3418 (@ehl-jf)

🐛 Bug Fixes

  • [jfrog-cli-artifactory] Fix: Empty Build Info When Using Maven Plugin Goals #406 (@agrasth)
  • [jfrog-cli-artifactory] fix/reference-token-privilege-escalation #416 (@reshmifrog)
  • [jfrog-cli-core] Fix reference token privilege escalation #1540 (@reshmifrog)

🔧 Internal Changes

  • [jfrog-cli-core] Bump pnpm/action-setup from 5 to 6 in the github-actions group #1541 (@dependabot[bot])

📦 Other Changes


📊 Summary

Repository Changes
jfrog-cli 3
jfrog-cli-artifactory 3
jfrog-cli-core 2
Total 8

🔗 Module Version Changes

Module From To
jfrog-cli-artifactory v0.8.1-0.20260406055206-755b2b3eb84d v0.8.1-0.20260414085427-0d891fde6d05
jfrog-cli-core v2.60.1-0.20260402104745-7a0bc2c11d63 v2.60.1-0.20260414083544-243b4d55328b

2.99.0

08 Apr 15:39
93e2ddd

Choose a tag to compare

What changed in v2.99.0

Auto-generated from 3 repositories · 2026-04-08
Comparing v2.98.0v2.99.0

ℹ️ No changes in: build-info-go, gofrog, jfrog-cli-security, jfrog-client-go

✨ New Features

🐛 Bug Fixes

  • [jfrog-cli] Fixed github action reference in tests #3417 (@bhanurp)
  • [jfrog-cli-artifactory] fix: omit empty credentials #384 (@tim-goto)

📊 Summary

Repository Changes
jfrog-cli 2
jfrog-cli-artifactory 1
jfrog-cli-core 1
Total 4

🔗 Module Version Changes

Module From To
jfrog-cli-artifactory v0.8.1-0.20260401103228-4840b9314595 v0.8.1-0.20260406055206-755b2b3eb84d
jfrog-cli-core v2.60.1-0.20260330172141-89d5ff480628 v2.60.1-0.20260402104745-7a0bc2c11d63

2.98.0

01 Apr 15:03
cbc297e

Choose a tag to compare

What changed in v2.98.0

Auto-generated from 6 repositories · 2026-04-01
Comparing v2.97.0v2.98.0

ℹ️ No changes in: gofrog

✨ New Features

  • [jfrog-cli] Support pnpm command for jfrog-cli #3390 (@fluxxBot)
  • [jfrog-cli-artifactory] Support pnpm command #393 (@fluxxBot)
  • [jfrog-cli-artifactory] Feat: Make skills zip produce deteriministic checksum #408 (@bhanurp)
  • [jfrog-cli-artifactory] New Feat: Malicious detection & deletion #411 (@bhanurp)
  • [jfrog-cli-security] Add entitlment snippet #711 (@attiasas)
  • [jfrog-cli-security] Malicious Code scan command #704 (@attiasas)
  • [jfrog-client-go] New Feat: Detect malicious skills packages #1332 (@bhanurp)

🐛 Bug Fixes

🔧 Internal Changes

  • [jfrog-cli] Update jfrog client go #3414 (@agrasth)
  • [jfrog-cli-artifactory] Bump jfrog-cli-evidence to v0.9.0 and update evidence create call #409 (@mnsboev)
  • [jfrog-cli-core] Bump github.com/buger/jsonparser from 1.1.1 to 1.1.2 #1535 (@dependabot[bot])
  • [jfrog-cli-core] Bump the github-actions group across 1 directory with 3 updates #1537 (@dependabot[bot])
  • [jfrog-cli-core] Bump github.com/go-git/go-git/v5 from 5.16.5 to 5.17.1 #1538 (@dependabot[bot])
  • [jfrog-cli-security] Update Xray lib to 1.3.0 #707 (@attiasas)

📦 Other Changes

  • [jfrog-cli] Updated build-info-go version and huggingface hidden flag as false #3408 (@naveenku-jfrog)
  • [jfrog-cli-artifactory] Improved error message when user tries to install SKILL blocked by xray #414 (@bhanurp)

📊 Summary

Repository Changes
jfrog-cli 6
jfrog-cli-artifactory 6
jfrog-cli-core 4
jfrog-cli-security 4
jfrog-client-go 4
build-info-go 1
Total 25

🔗 Module Version Changes

Module From To
build-info-go v1.13.1-0.20260313042712-238e6dca3dce v1.13.1-0.20260331040230-c3b53d1a24ac
jfrog-cli-artifactory v0.8.1-0.20260325060310-a7ee867a2090 v0.8.1-0.20260401103228-4840b9314595
jfrog-cli-core v2.60.1-0.20260324124720-40db37833f61 v2.60.1-0.20260330172141-89d5ff480628
jfrog-cli-security v1.26.6 v1.27.0
jfrog-client-go v1.55.1-0.20260325143056-bdd18b12bbca v1.55.1-0.20260401130923-f5a15b584a0d