Skip to content

fix(cypress-image): resolve critical security vulnerabilities#2712

Closed
billhimmelsbach wants to merge 3 commits intomasterfrom
5478-resolve-critical-vulns
Closed

fix(cypress-image): resolve critical security vulnerabilities#2712
billhimmelsbach wants to merge 3 commits intomasterfrom
5478-resolve-critical-vulns

Conversation

@billhimmelsbach
Copy link
Contributor

Let's fix some security vulnerabilities in the old cypress image!

Changes

  • updates us to Cypress v15 to resolve a ton of vulnerabilities (the latest Cypress 14 image didn't get us as far)
Before After
Screenshot 2026-03-20 at 5 56 51 PM test-security-no-critical-security copy
Before After
test-security-no-critical-security copy Screenshot 2026-03-20 at 7 07 28 PM
  • remove manually installing cypress with the force option, but add legacy peer deps flag because of incompatibility with cypress-keycloak v2.0.2

Testing

  1. Do the tests still run and pass locally and in CI?
  2. Are the vulnerabilities resolved?

Notes

TODO

  • update cypress config for v15

Resolves GHE #5478

@billhimmelsbach billhimmelsbach changed the title 5478 resolve critical vulns fix(cypress-image): resolve security vulnerabilities Mar 21, 2026
@billhimmelsbach billhimmelsbach changed the title fix(cypress-image): resolve security vulnerabilities fix(cypress-image): resolve critical security vulnerabilities Mar 21, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant