brianlovin / security-checklist

A checklist for staying safe on the internet
https://brianlovin.com/security
MIT License
925 stars 76 forks source link

Bump cypress from 5.0.0 to 5.1.0 #604

Closed dependabot[bot] closed 4 years ago

dependabot[bot] commented 4 years ago

Bumps cypress from 5.0.0 to 5.1.0.

Release notes

Sourced from cypress's releases.

5.1.0

Released 9/1/2020

Features:

  • Introducing experimental full network stubbing support 🎉.
    • With experimentalNetworkStubbing enabled, the cy.route2 command is available.
    • By using cy.route2(), your tests can intercept, modify, and wait on any type of HTTP request originating from your app, including XMLHttpRequests, fetch requests, beacons, and subresources (like iframes and scripts).
    • Outgoing HTTP requests can be modified before reaching the destination server, and the HTTP response can be intercepted as well before it reaches the browser.
    • See the cy.route2() docs for more information on how to enable this experiment.
  • cy.trigger() now accepts an eventConstructor option for specifying the constructor with which to create the event to trigger. Addresses #5650.

Bugfixes:

  • Improved warnings for when user is exceeding test limits of the free Dashboard plan. Addresses #8409.
  • Added retries to TestOptions types. Addresses #8405.
  • Added types for specType field on Cypress.spec. Addresses #8256.
  • Fixed a typo in type definitions. Addresses #8417.
  • Cypress now resolves and loads tsconfig.json for TypeScript projects starting from the plugins directory. Addresses #8359.
  • Fixed an issue where, if npm config's noproxy is set, unexpected behavior could occur. Addresses #8287.
  • Fixed an issue where nesting hooks within other hooks caused the test to never finish. Addresses #8350.
  • Fixed an issue in where tests would unexpectedly fail with a "Can't resolve 'async_hooks'" error. Addresses #8375.
  • Fixed an issue where return values from blob utils were mistaken for promises and could cause errors. Addresses #8365.
  • Fixed an issue with loading .mjs files. Addresses #8361.
  • Fixed an issue causing tests to run slowly in Electron. Addresses #7930.
  • Using .should with only chainer assertions will now throw an error. Addresses #883.
  • cy.trigger() now includes the view property in the event object when appropriate. Addresses #3686.
  • Fixed an issue where Cypress would not detect newer 64-bit installations of Chrome on Windows. Addresses #8425.
  • Fixed an issue where Cypress would not detect per-user Firefox installations on Windows. Addresses #8432.

Dependency Updates:

  • Updated dependency iconv-lite to version 0.6.2. Addresses #8387.
  • Updated dependency command-exists to version 1.2.9. Addresses #8388.
  • Updated dependency electron to version 9.2.1. Addresses #8436.
Commits
  • 36bc52e release 5.1.0 [skip ci]
  • ad8822d fix(launcher): detect Firefox installed in AppData on Windows (#8460)
  • 1ad9bd1 fix: error when spec code registers nested hooks (#8400)
  • c0ab5c8 chore: fix typo (#8452)
  • 15fdf12 feat: can dispatch events with the type they want. (#8305)
  • 2469473 chore: rename experimental network stubbing (#8450)
  • b448c16 fix(launcher): detect new Chrome 64-bit path on Windows (#8449)
  • c378960 feat(net-stubbing): experimental full network mocking support (#4176)
  • cc5aafc fix: don't scaffold integration when using component tests (#8315)
  • 032b869 chore(deps): update dependency electron to version 9.2.1 🌟 (#8436)
  • Additional commits viewable in compare view


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
vercel[bot] commented 4 years ago

This pull request is being automatically deployed with Vercel (learn more).
To see the status of your deployment, click below or on the icon next to each commit.

🔍 Inspect: https://vercel.com/brianlovin/security-checklist/31bugpf07
✅ Preview: https://security-checklist-git-dependabot-npmandyarncypress-510.brianlovin.vercel.app

lighthouse-metrics[bot] commented 4 years ago

https://security-checklist-31bugpf07.vercel.app/:

Lighthouse Scores for https://security-checklist-31bugpf07.vercel.app/