You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
fix(deps): bump qs to ^6.15.2 (CVE-2026-8723) (#107)
Bumps the qs range from ~6.14.1 to ^6.15.2 so resolution includes the
fix for GHSA-q8mj-m7cp-5q26 (qs.stringify TypeError DoS with
arrayFormat: "comma" + encodeValuesOnly: true on arrays containing
null/undefined). The tilde range previously capped resolution at 6.14.x,
which does not include the patched 6.15.2.
Merge pull request #105 from cypress-io/deps/rm-uuid
chore(deps): Remove the `uuid` dependency and use Node's built-in `crypto.randomUUID()`
for HTTP digest `cnonce` (with hyphen stripping unchanged) and multipart
boundaries.
BREAKING CHANGE: The minimum supported Node.js version is now >= 14.17.0
(`crypto.randomUUID()`). Consumers must run on Node 14.17+ (or a newer
supported release). Upgrade Node before upgrading @cypress/request.
Projects pinned to older Node versions will fail at install time due to the
`engines` field and may fail at runtime if they bypass it.
Refs: #105