[Snyk] Security upgrade @types/cypress from 1.1.3 to 1.1.6#48
[Snyk] Security upgrade @types/cypress from 1.1.3 to 1.1.6#48
Conversation
…nerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-FORMDATA-10841150
There was a problem hiding this comment.
Pull request overview
This PR upgrades @types/cypress from version 1.1.3 to 1.1.6 to address a critical security vulnerability (SNYK-JS-FORMDATA-10841150) with a severity score of 791. The upgrade involves updating both the package.json and package-lock.json files to reference the newer version.
Key Changes:
- Updated
@types/cypressversion from^1.1.3to^1.1.6in optionalDependencies - Updated package-lock.json with new version, integrity hash, and license information
- Updated deprecation message in the package stub
Reviewed changes
Copilot reviewed 1 out of 2 changed files in this pull request and generated 1 comment.
| File | Description |
|---|---|
| frontend/package.json | Updates @types/cypress version to 1.1.6 in optionalDependencies |
| frontend/package-lock.json | Updates lockfile with new version metadata, but incorrectly adds the package to the main dependencies section |
Files not reviewed (1)
- frontend/package-lock.json: Language not supported
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
| "@fortawesome/free-solid-svg-icons": "~6.6.0", | ||
| "@mempool/mempool.js": "2.3.0", | ||
| "@ng-bootstrap/ng-bootstrap": "^16.0.0", | ||
| "@types/cypress": "^1.1.6", |
There was a problem hiding this comment.
The @types/cypress package should only be in optionalDependencies, not in the main dependencies section. This entry at line 31 should be removed as it's already correctly listed in the optionalDependencies section at line 65. Having it in both sections is incorrect and could cause installation issues.
Snyk has created this PR to fix 1 vulnerabilities in the npm dependencies of this project.
Snyk changed the following file(s):
frontend/package.jsonfrontend/package-lock.jsonVulnerabilities that will be fixed with an upgrade:
SNYK-JS-FORMDATA-10841150
Important
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.
For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic
Learn how to fix vulnerabilities with free interactive lessons:
🦉 Learn about vulnerability in an interactive lesson of Snyk Learn.