cypress-io / github-action

GitHub Action for running Cypress end-to-end & component tests
https://on.cypress.io/guides/continuous-integration/github-actions
MIT License
1.36k stars 343 forks source link

chore(deps): update webpack-dev-server dependencies #1164

Closed MikeMcC399 closed 7 months ago

MikeMcC399 commented 7 months ago

Issue

In examples/webpack npm audit reports

# npm audit report

express  <4.19.2
Severity: moderate
Express.js Open Redirect in malformed URLs - https://github.com/advisories/GHSA-rv95-896h-c2vc
fix available via `npm audit fix`
node_modules/express

1 moderate severity vulnerability

"express": "^4.17.3" is a dependency of webpack-dev-server@5.0.4 (current latest)

Change

Refresh dependencies of webpack-dev-server@5.0.4 through uninstall and re-install with npm.

Verification

Ubuntu 22.04.4 LTS, Node.js 20.12.0 LTS

Execute:

cd examples/webpack
npm ci

and confirm no vulnerabilities reported.

cypress-app-bot commented 7 months ago
github-actions[bot] commented 5 months ago

:tada: This PR is included in version 6.7.0 :tada:

The release is available on:

Your semantic-release bot :package::rocket: