Skip to content

fix(deps): update micromatch to 4.0.8#1239

Merged
jennifer-shehane merged 1 commit into
cypress-io:masterfrom
MikeMcC399:update/micromatch-4.0.8
Aug 27, 2024
Merged

fix(deps): update micromatch to 4.0.8#1239
jennifer-shehane merged 1 commit into
cypress-io:masterfrom
MikeMcC399:update/micromatch-4.0.8

Conversation

@MikeMcC399

@MikeMcC399 MikeMcC399 commented Aug 27, 2024

Copy link
Copy Markdown
Collaborator

Issue

npm audit reports

micromatch  <4.0.8
Severity: moderate
Regular Expression Denial of Service (ReDoS) in micromatch - https://github.com/advisories/GHSA-952p-6rrq-rcjv

Change

Execute

npm audit fix

Other

Due to micromatch also being used in the action code (not just in an examples directory) an update results in a patch release of the action.

└─┬ find-yarn-workspace-root@2.0.0
  └── micromatch@4.0.8

@MikeMcC399 MikeMcC399 added bug Something isn't working type: dependencies labels Aug 27, 2024
@cypress-app-bot

cypress-app-bot commented Aug 27, 2024

Copy link
Copy Markdown
Collaborator

@MikeMcC399 MikeMcC399 self-assigned this Aug 27, 2024
@MikeMcC399 MikeMcC399 marked this pull request as ready for review August 27, 2024 11:18
@jennifer-shehane jennifer-shehane merged commit 57f6235 into cypress-io:master Aug 27, 2024
@github-actions

github-actions Bot commented Aug 27, 2024

Copy link
Copy Markdown

🎉 This PR is included in version 6.7.3 🎉

The release is available on:

Your semantic-release bot 📦🚀

@MikeMcC399 MikeMcC399 deleted the update/micromatch-4.0.8 branch August 27, 2024 13:52
This was referenced Aug 28, 2024
Merged
Merged
aayushshah15 pushed a commit to useblacksmith/cypress-io that referenced this pull request Dec 3, 2024
@MikeMcC399 @aayushshah15
fix(deps): update micromatch to 4.0.8 (cypress-io#1239)
7165d85
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@jennifer-shehane jennifer-shehane jennifer-shehane approved these changes

Assignees

@MikeMcC399 MikeMcC399

Labels

bug Something isn't working released type: dependencies

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

3 participants

@MikeMcC399 @cypress-app-bot @jennifer-shehane