cypress-io / github-action

GitHub Action for running Cypress end-to-end & component tests
https://on.cypress.io/guides/continuous-integration/github-actions
MIT License
1.35k stars 357 forks source link

test(deps): update ws to 8.17.1 #1204

Closed MikeMcC399 closed 2 months ago

MikeMcC399 commented 2 months ago

Issue

npm audit reports a vulnerability with ws@8.16.0 in examples/webpack

$ npm audit
# npm audit report

ws  8.0.0 - 8.17.0
Severity: high
ws affected by a DoS when handling a request with many HTTP headers - https://github.com/advisories/GHSA-3h5v-q93c-6h6q
fix available via `npm audit fix`
node_modules/ws

1 high severity vulnerability

To address all issues, run:
  npm audit fix
$ npm ls ws
└─┬ webpack-dev-server@5.0.4
  └── ws@8.16.0

Change

Update to ws@8.17.1, which is current latest, using npm audit fix.

Verification

cd examples/webpack
npm ci
npm audit
cypress-app-bot commented 2 months ago
github-actions[bot] commented 1 month ago

:tada: This PR is included in version 6.7.2 :tada:

The release is available on:

Your semantic-release bot :package::rocket: