Skip to content

chore(deps): bump cypress from 15.12.0 to 15.13.0 and fix CodeQL workflow#1723

Merged
pethers merged 3 commits intomainfrom
dependabot/npm_and_yarn/cypress-0b6a21e91b
Mar 24, 2026
Merged

chore(deps): bump cypress from 15.12.0 to 15.13.0 and fix CodeQL workflow#1723
pethers merged 3 commits intomainfrom
dependabot/npm_and_yarn/cypress-0b6a21e91b

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Mar 24, 2026 •
edited by Copilot AI
Loading

Bumps the cypress group with 1 update: cypress.

Updates cypress from 15.12.0 to 15.13.0

Also fixes the CodeQL workflow that was failing due to using separate javascript and typescript matrix entries. CodeQL's JavaScript extractor already handles TypeScript files, so both parallel jobs were analyzing the same 965 TS files and racing to upload SARIF results, causing both to fail. Changed to the combined javascript-typescript language identifier supported by CodeQL v3 actions (CLI 2.24.3+).

πŸ“ Connect Copilot coding agent with Jira, Azure Boards or Linear to delegate work to Copilot in one click without leaving your project management tool.

@dependabot
chore(deps): bump cypress from 15.12.0 to 15.13.0 in the cypress group
8668be7 
Bumps the cypress group with 1 update: [cypress](https://github.com/cypress-io/cypress).


Updates `cypress` from 15.12.0 to 15.13.0
- [Release notes](https://github.com/cypress-io/cypress/releases)
- [Changelog](https://github.com/cypress-io/cypress/blob/develop/CHANGELOG.md)
- [Commits](cypress-io/cypress@v15.12.0...v15.13.0)

---
updated-dependencies:
- dependency-name: cypress
  dependency-version: 15.13.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: cypress
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot bot commented on behalf of github Mar 24, 2026

Labels

The following labels could not be found: npm. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot dependabot bot added the dependencies Dependency updates label Mar 24, 2026
@dependabot dependabot bot requested a review from pethers as a code owner March 24, 2026 20:13
@dependabot dependabot bot added the dependencies Dependency updates label Mar 24, 2026
@github-actions
Copy link
Copy Markdown
Contributor

github-actions bot commented Mar 24, 2026 •
edited
Loading

Dependency Review

βœ… No vulnerabilities or license issues or OpenSSF Scorecard issues found.

Snapshot Warnings

⚠️: No snapshots were found for the head SHA 4ee75a6.
Ensure that dependencies are being submitted on PR branches and consider enabling retry-on-snapshot-warnings. See the documentation for more information and troubleshooting advice.

OpenSSF Scorecard

PackageVersionScoreDetails
npm/cypress 15.13.0 🟒 4.7
Details
CheckScoreReason
Code-Review🟒 9Found 20/21 approved changesets -- score normalized to 9
Maintained🟒 1030 commit(s) and 13 issue activity found in the last 90 days -- score normalized to 10
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Packaging⚠️ -1packaging workflow not detected
Security-Policy🟒 10security policy file detected
Dangerous-Workflow⚠️ 0dangerous workflow patterns detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
License🟒 10license file detected
Binary-Artifacts🟒 10no binaries found in the repo
Signed-Releases⚠️ 0Project has not signed or included provenance with any releases.
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
Fuzzing⚠️ 0project is not fuzzed
SAST🟒 10SAST tool detected

Scanned Files

  • package-lock.json

@github-actions github-actions bot added the infrastructure CI/CD and build infrastructure label Mar 24, 2026
@github-actions
Copy link
Copy Markdown
Contributor

github-actions bot commented Mar 24, 2026

πŸ“Έ Automated UI Screenshots

πŸ“‹ Screenshots Captured (8)

# Screenshot
1 01-splash-screen.png - 01 splash screen.png
2 02-intro-screen-menu.png - 02 intro screen menu.png
3 03-intro-screen-archetype-selector.png - 03 intro screen archetype selector.png
4 04-controls-screen.png - 04 controls screen.png
5 05-philosophy-screen.png - 05 philosophy screen.png
6 06-training-screen.png - 06 training screen.png
7 07-combat-screen-practice.png - 07 combat screen practice.png
8 08-combat-screen-versus.png - 08 combat screen versus.png

πŸ“¦ Download Screenshots

πŸ“₯ Download all screenshots from workflow artifacts

Screenshots are preserved as workflow artifacts for 30 days.

πŸ€– Generated by Playwright automation

@pethers
Copy link
Copy Markdown
Member

pethers commented Mar 24, 2026

@copilot fix issues, old issues but need to be fixed anyway

CodeQL / Analyze (javascript) (pull_request)
CodeQL / Analyze (javascript) (pull_request)Failing after 2m
CodeQL / Analyze (typescript) (pull_request)
CodeQL / Analyze (typescript) (pull_request)Failing after 2m

@pethers
fix: use combined javascript-typescript language in CodeQL workflow
c75beb9 
The CodeQL workflow was using separate 'javascript' and 'typescript' matrix
entries, but CodeQL's JavaScript extractor already handles TypeScript files.
This caused two parallel jobs to analyze the same 965 TypeScript files and
race to upload SARIF results, causing both to fail.

Changed to the combined 'javascript-typescript' language identifier supported
by CodeQL v3 actions (CLI 2.24.3+), which runs a single analysis covering
both JS and TS files.

Co-authored-by: pethers <1726836+pethers@users.noreply.github.com>
Agent-Logs-Url: https://github.com/Hack23/blacktrigram/sessions/affda109-6845-44c9-9aa3-c45b75641368
Copy link
Copy Markdown
Contributor

Copilot AI commented Mar 24, 2026

@copilot fix issues, old issues but need to be fixed anyway

[CodeQL / Analyze (javascript) (pull_request)](https://github.com/Hack23/blacktrigram/actions/runs/23510113939/job/68428...

Fixed in c75beb9. The CodeQL workflow was using separate javascript and typescript matrix entries, but CodeQL's JS extractor already handles TypeScript files. Both parallel jobs were analyzing the same 965 TS files and racing to upload SARIF results, causing both to fail. Changed to the combined javascript-typescript language identifier supported by CodeQL v3 actions.

@github-actions github-actions bot added the security Security improvements label Mar 24, 2026
Copilot AI changed the title chore(deps): bump cypress from 15.12.0 to 15.13.0 in the cypress group chore(deps): bump cypress from 15.12.0 to 15.13.0 and fix CodeQL workflow Mar 24, 2026
@github-advanced-security
Copy link
Copy Markdown

github-advanced-security bot commented Mar 24, 2026

You are seeing this message because GitHub Code Scanning has recently been set up for this repository, or this pull request contains the workflow file for the Code Scanning tool.

What Enabling Code Scanning Means:

  • The 'Security' tab will display more code scanning analysis results (e.g., for the default branch).
  • Depending on your configuration and choice of analysis tool, future pull requests will be annotated with code scanning analysis results.
  • You will be able to see the analysis results for the pull request's branch on this overview once the scans have completed and the checks have passed.

For more information about GitHub Code Scanning, check out the documentation.

@pethers pethers merged commit b9ece4e into main Mar 24, 2026
7 checks passed
@pethers pethers deleted the dependabot/npm_and_yarn/cypress-0b6a21e91b branch March 24, 2026 20:43
@github-actions
Copy link
Copy Markdown
Contributor

github-actions bot commented Mar 24, 2026

πŸ“Έ Automated UI Screenshots

πŸ“‹ Screenshots Captured (8)

# Screenshot
1 01-splash-screen.png - 01 splash screen.png
2 02-intro-screen-menu.png - 02 intro screen menu.png
3 03-intro-screen-archetype-selector.png - 03 intro screen archetype selector.png
4 04-controls-screen.png - 04 controls screen.png
5 05-philosophy-screen.png - 05 philosophy screen.png
6 06-training-screen.png - 06 training screen.png
7 07-combat-screen-practice.png - 07 combat screen practice.png
8 08-combat-screen-versus.png - 08 combat screen versus.png

πŸ“¦ Download Screenshots

πŸ“₯ Download all screenshots from workflow artifacts

Screenshots are preserved as workflow artifacts for 30 days.

πŸ€– Generated by Playwright automation

@github-actions
Copy link
Copy Markdown
Contributor

github-actions bot commented Mar 24, 2026

πŸ“Έ Automated UI Screenshots

πŸ“‹ Screenshots Captured (8)

# Screenshot
1 01-splash-screen.png - 01 splash screen.png
2 02-intro-screen-menu.png - 02 intro screen menu.png
3 03-intro-screen-archetype-selector.png - 03 intro screen archetype selector.png
4 04-controls-screen.png - 04 controls screen.png
5 05-philosophy-screen.png - 05 philosophy screen.png
6 06-training-screen.png - 06 training screen.png
7 07-combat-screen-practice.png - 07 combat screen practice.png
8 08-combat-screen-versus.png - 08 combat screen versus.png

πŸ“¦ Download Screenshots

πŸ“₯ Download all screenshots from workflow artifacts

Screenshots are preserved as workflow artifacts for 30 days.

πŸ€– Generated by Playwright automation

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@pethers pethers Awaiting requested review from pethers pethers is a code owner

Assignees

No one assigned

Labels

dependencies Dependency updates infrastructure CI/CD and build infrastructure security Security improvements

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

3 participants

@pethers @github-advanced-security