Skip to content

Update serve to 14.2.0#773

Merged
jaffrepaul merged 1 commit into
cypress-io:masterfrom
MikeMcC399:update/serve
Feb 6, 2023
Merged

Update serve to 14.2.0#773
jaffrepaul merged 1 commit into
cypress-io:masterfrom
MikeMcC399:update/serve

Conversation

@MikeMcC399

Copy link
Copy Markdown
Collaborator

This PR mitigates a critical vulnerability reported by dependabot and yarn audit for:

It concerns minimist < 1.2.6 derived from serve.

In this PR serve is updated to the current version 14.2.0 in all examples which use this npm package.

For consistency serve is also moved from "dependencies" to "devDependencies" in package.json files.

The following examples are affected:

Verification

Execute

cd examples/start-and-yarn-workspaces
yarn audit
cd ../v9/start-and-yarn-workspaces
yarn audit

Ensure that there is no critical vulnerability reported for minimist.

@MikeMcC399 MikeMcC399 marked this pull request as ready for review February 3, 2023 12:29
@jaffrepaul jaffrepaul merged commit df66fc9 into cypress-io:master Feb 6, 2023
@MikeMcC399 MikeMcC399 deleted the update/serve branch February 6, 2023 19:56
@github-actions

Copy link
Copy Markdown

🎉 This PR is included in version 5.0.9 🎉

The release is available on:

Your semantic-release bot 📦🚀

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants