dependency: bump @cypress/request to ^3.0.4

[jennifer-shehane]

• Closes

Additional details

This bumps some dependencies of our @cypress/request library. TBH I was trying to address some vulnerabilities that a user surfaced. (I need to investigate why these wouldn't be surfaced by our Snyk scans.) At the end of the day, this update didn't actually fix those vulnerabilities since those deps exist on other deps we have also.

This should be a good fix regardless as it updates dependencies below which all contained fixes:

• updates dependency form-data to ~2.5.0
• updates dependency qs to v6.13.0
• updates dependency http-signature to ~1.4.0

Steps to test

Tests pass

How has the user experience changed?

It's possible this could have fixed some issue for users.

PR Tasks

• Have tests been added/updated?
• Has a PR for user-facing changes been opened in cypress-documentation?
• Have API changes been updated in the type definitions?

[jennifer-shehane]

I don't know why my commit history keeps being weird when I open new PRs....

[cypress]

cypress    Run #56986

Run Properties:   Passed #56986  •  9b06ac5696: Merge branch 'develop' into bump-request-lib

Project	cypress
Branch Review	bump-request-lib
Run status	Passed #56986
Run duration	09m 24s
Commit	9b06ac5696: Merge branch 'develop' into bump-request-lib
Committer	Jennifer Shehane
View all properties for this run ↗︎

---

Test results
Failures	0
Flaky	0
Pending	1
Skipped	0
Passing	482
View all changes introduced in this branch ↗︎

---

Warning

No Report: Something went wrong and we could not generate a report for the Application Quality products.

[MikeMcC399]

@jennifer-shehane

I don't know why my commit history keeps being weird when I open new PRs....

It sounds like you need to reset your local copy of the develop branch so that it matches the commit history on GitHub. That should remove all the merge commits you apparently have in your local copy.

[jennifer-shehane]

@MikeMcC399 I reset everything on my side and it seems to be playing nicer.

[MikeMcC399]

@jennifer-shehane

Would you want to update to @cypress/request@^3.0.5 now?

[jennifer-shehane]

@MikeMcC399 I'll merge this first just in case that introduces something that breaks when we run it.

[MikeMcC399]

@jennifer-shehane

I'll merge this first just in case that introduces something that breaks when we run it.

Understood.

New installations of Cypress in the field are going to pull @cypress/[email protected] anyway, since the dependency is semver @cypress/request@^3.0.4.

[cypress-bot]

Released in 13.15.0.

This comment thread has been locked. If you are still experiencing this issue after upgrading to
Cypress v13.15.0, please open a new issue.